<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="250">
<package pkgid="ea23429858e37515c94587051120c474b3dbfd18a9a9d7496373ec8bb7bb53ae" name="flightctl" arch="src">
  <version epoch="0" ver="0.10.0~main~85~g5d1c1d38" rel="1.20250813083749482438.main.85.g5d1c1d38.fc44"/>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.0.1-5" date="1724241600">- Add must-gather script to provide a simple mechanism to collect agent debug</changelog>
  <changelog author="Miguel Angel Ajo &lt;majopela@redhat.com&gt; - 0.3.0-1" date="1730721600">- Move the Release field to -1 so we avoid auto generating packages
  with -5 all the time.</changelog>
  <changelog author="Miguel Angel Ajo &lt;majopela@redhat.com&gt; - 0.4.0-1" date="1738929600">- Add selinux support for console pty access</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-1" date="1743422400">- Add services sub-package for installation of containerized flightctl services</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.6.0-2" date="1743681600">- Add sos report plugin support</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.0~main~85~g5d1c1d38-1.20250813083749482438.main.85.g5d1c1d38" date="1755086400">- EDM-1997: Annotate alerts with the event message (Avishay Traeger)
- EDM-1996: Emit single event for disconnected device (Avishay Traeger)
- EDM-1992: Agent SystemInfo smart collection (#1526) (kkyrazis)
- EDM-1476: add Events validation TCs (amalykhi)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-1821: test pass (Asaf Ben Natan)
- EDM-1821: added monitoring validation (Asaf Ben Natan)
- EDM-1993: Add restart configuration and polling for generated certificate files (Dakota Crowder)
- NO-ISSUE: publisher: call stop() before wg.Done() to fix flaky cancellation test (#1524) (Ilya)
- NO-ISSUE: Fix broken link in docs (Avishay Traeger)
- EDM-1987: Disallow label updates for owned fleets (Avishay Traeger)
- EDM-1712: fixed stuff based on PR reviews (Asaf Ben Natan)
- EDM-1712: Migrate HTTP metrics to OTEL (#1489) (Siddarth Royapally)
- EDM-1712: added tests renamed to domain metrics (asafbss)
- EDM-1845: signer refactoring: avoid parsing CSR multiple times, decouple from API layer (Ilya)
- EDM-1938: agent/dependency: ensure partial layer pull cleanup (Sam Batschelet)
- EDM-1818: Prefetch Manager Config Docs (#1514) (kkyrazis)
- EDM-1058: docs/user: add TPM related docs (Sam Batschelet)
- EDM-1058: internal/agent: small TPM api update (Sam Batschelet)
- EDM-1058: internal/service: refactor TPM csr logic (Sam Batschelet)
- EDM-1058: internal/tpm: ensure chain validaition (Sam Batschelet)
- NO-ISSUE: Event fixes (Avishay Traeger)
- EDM-1170: Fix Makefile (#1490) (Siddarth Royapally)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-1946: labels endpoint with field-selector=metadata.labels returns error 400 (#1495) (noga-magen)
- EDM-1058: internal/tpm: ensure conditions are maintained during approval (Sam Batschelet)
- EDM-1058: Fix simulator tests and flush key bug (Kyle Kyrazis)
- EDM-1058: Testing TPM Ownership Auth (Kyle Kyrazis)
- EDM-1058: Implement TPM-rooted device identities (Sam Batschelet)
- EDM-1869: Add missing events (Avishay Traeger)
- NO-ISSUE: reverting EDM-1871 (noga-magen)
- EDM-626: Add Git support for test harness (#1328) (Siddarth Royapally)
- EDM-1958: Fix Device UpdateStatus event panics (#1482) (kkyrazis)
- NO-ISSUE: Add io.openshift.tags to db-setup container (#1486) (Assaf Albo)
- EDM-1170: Auto-discover VM IP for agent updates (#1393) (Siddarth Royapally)
- EDM-1845: middleware agent cert OrgID support (#1471) (Ilya)
- NO-ISSUE: no need to keep rpms in gh-pages (#1477) (Gregory Shilin)
- EDM-1952: Add middlewares alertmanager proxy (Avishay Traeger)
- EDM-1838: deny DELETE ER  when device exists (#1415) (Ilya)
- NO-ISSUE: fix version generation for COPR for release (#1468) (Gregory Shilin)
- EDM-1944: setting Enforcing selinux in microshift registartion E2E test (sserafin)
- EDM-1942: Redact passwords when config is logged (Dakota Crowder)
- EDM-1936: Fix Router group order to make auth/validate reachable (rawagner)
- EDM-1846: orgs cli support (#1424) (Ilya)
- NO-ISSUE: Add VM_DISK_SIZE_INC to set the disk size increment in vm (Itzik Brown)
- EDM-1766: Small SELinux Related Tweaks (Ben Keith)</changelog>
</package>
<package pkgid="875500c5b06ffd0298328c505684a37ce6027d86880e9d2fe8c01467e65a4ebf" name="flightctl" arch="src">
  <version epoch="0" ver="1.2.0~main~27~gb5c1b040" rel="1.20260204153358102810.main.27.gb5c1b040.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0~main~27~gb5c1b040-1.20260204153358102810.main.27.gb5c1b040" date="1770206400">- NO-ISSUE: missing network policy for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Bump resourcesync e2e task timeout value (Dakota Crowder)
- NO-ISSUE: Add e2e harness setup without VMs and use for ResourceSync tests (Dakota Crowder)
- EDM-3265: build cs9 microshift image only if the repo is accessible (Ilya Skornyakov)
- EDM-3262: fixed cancel not working properly for pending states (Asaf Ben Natan)
- EDM-3263: when defaulting to HOST_FQDN -&gt; lowercase it (Asaf Ben Natan)
- EDM-3005: update ginkgo_total_nodes (Gregory Shilin)
- EDM-3005: update ginkgo_total_nodes to be 2 (Gregory Shilin)
- EDM-3005: Reorganize tests matrix. Label some tests as "agent" and run them for both CS9 and CS10 (Gregory Shilin)
- EDM-3005: Reorganize tests matrix. Label some tests as "agent" and run them for both CS9 and CS10 (Gregory Shilin)
- EDM-3005: Add cs10-specific error message support (Gregory Shilin)
- EDM-3005: Add running cs10-bootc e2e tests. Fix certificate handling (Gregory Shilin)
- NO-ISSUE: Disable rollback test temporarily (Ilya Skornyakov)
- NO-ISSUE: imagebuild api set to v1alpha1 (Asaf Ben Natan)
- EDM-3258: EDM-3257,operator cant cancel fix (Asaf Ben Natan)
- NO-ISSUE: fix Publish Binaries workflow (Ilya Skornyakov)
- EDM-2985: fix imports post-merge (Ilya Skornyakov)
- EDM-2985: add unit tests (Ilya Skornyakov)
- EDM-2985: validate header value (Ilya Skornyakov)
- EDM-2985: Add API version to HTTP request logs (Ilya Skornyakov)
- NO-ISSUE: repo url + entitlements support (Asaf Ben Natan)
- NO-ISSUE: Updated init container quadlet files to ensure everything in standardoutput and standarderror shows up in journal (Ram)
- NO-ISSUE: Add TC ID 87279 to greenboot rollback test (amalykhi)
- EDM-2636: Rootless Quadlets (Ben Keith)
- EDM-3226: fixes invalid chars attempted to be saved to psql (Asaf Ben Natan)
- EDM-6163: Skip kind test (Eldar Weiss)
- NO-ISSUE: MVC separation (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a2f1e1ba8378fff01919f6a6f209f5c41269d95ca913578e3a7bd8a4531d96f6" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~272~ge4c489e1" rel="1.20260702083056866245.main.272.ge4c489e1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~272~ge4c489e1-1.20260702083056866245.main.272.ge4c489e1" date="1782993600">- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="49294ae077f927e1951c1548abfcacf337cffac18ed709f7b77bf0e4fbce353c" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~275~g15e5c0d3" rel="1.20260705062113984065.main.275.g15e5c0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~275~g15e5c0d3-1.20260705062113984065.main.275.g15e5c0d3" date="1783252800">- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b018baea50bd8f86ee6b9c2a371acf1debe3e1e6b855221a53fd070c835fa824" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~276~g79d90e0b" rel="1.20260705084048010742.main.276.g79d90e0b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~276~g79d90e0b-1.20260705084048010742.main.276.g79d90e0b" date="1783252800">- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ca60c5a5fe86300af578f81b94d1e63be571aabdd1be8d4f3a1d16c8186706d5" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~277~g92597755" rel="1.20260705090528951244.main.277.g92597755.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~277~g92597755-1.20260705090528951244.main.277.g92597755" date="1783252800">- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9b8dff7ca888b0ea0feae21d590b62a4ca19933fdba110dbcc83aaa0566ddfe4" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~278~ge4d56bea" rel="1.20260705102718544650.main.278.ge4d56bea.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~278~ge4d56bea-1.20260705102718544650.main.278.ge4d56bea" date="1783252800">- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ddd7a5e9bbb21bf23e1bb8cc2f32e57f70ddea44b356239cef9213a122db9200" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~279~g5e657f9a" rel="1.20260706103919292593.main.279.g5e657f9a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~279~g5e657f9a-1.20260706103919292593.main.279.g5e657f9a" date="1783339200">- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e78804e8c739b3a9d26ff344f91703e0ad013c77a9fd88cdc4b6d0ed2328fdbe" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~280~gfd17722f" rel="1.20260706151411942403.main.280.gfd17722f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~280~gfd17722f-1.20260706151411942403.main.280.gfd17722f" date="1783339200">- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d52e74787b0a7d3eb2e65463bf21bc2bcbeca4ffb9c7f744fdacb66bb4bdd3a1" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~281~ga53cdfe3" rel="1.20260706223619198122.main.281.ga53cdfe3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~281~ga53cdfe3-1.20260706223619198122.main.281.ga53cdfe3" date="1783339200">- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ffc7453cd723333bfb905af9820d92ba43c24995e22eecf04c4a4198c042b4a5" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~282~gb8814533" rel="1.20260707080941577366.main.282.gb8814533.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~282~gb8814533-1.20260707080941577366.main.282.gb8814533" date="1783425600">- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8f08667354781f7d365782b59402dbf49500443f600b9ec52816b68a5858c890" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~283~gcac8f0d3" rel="1.20260707202441753497.main.283.gcac8f0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~283~gcac8f0d3-1.20260707202441753497.main.283.gcac8f0d3" date="1783425600">- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="5980fe6eabf19d1cd412bcb6e80bf48679747f49da364ea3ed6b75d47eae6d17" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~284~ge9e26e7c" rel="1.20260708063029767266.main.284.ge9e26e7c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~284~ge9e26e7c-1.20260708063029767266.main.284.ge9e26e7c" date="1783512000">- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9d422aa0d12398c97b6d24a990fa7d6c06079d60a0299db8fb281bfa52c6ebae" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~285~g1c011be3" rel="1.20260708121656129457.main.285.g1c011be3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~285~g1c011be3-1.20260708121656129457.main.285.g1c011be3" date="1783512000">- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1431f118ed95c6daf6b5e1abae0783f6aa4c984bab6f9d9af67d70ba4f78b688" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~286~g0a7a009a" rel="1.20260709063944354350.main.286.g0a7a009a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~286~g0a7a009a-1.20260709063944354350.main.286.g0a7a009a" date="1783598400">- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c1e9b78e134cc62266751e77eb56acafd6f307a7514eb52e480d9170928a8bde" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~287~g9eee6407" rel="1.20260709100547687031.main.287.g9eee6407.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~287~g9eee6407-1.20260709100547687031.main.287.g9eee6407" date="1783598400">- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f6b739521d6e67c04701a980f5b079f35849636e0cb4496e45d3fd036aad0e5a" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~288~g7ce7e95e" rel="1.20260709111602902675.main.288.g7ce7e95e.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~288~g7ce7e95e-1.20260709111602902675.main.288.g7ce7e95e" date="1783598400">- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="cc6b2e7d70e5bb9ab67bf41bef44eec133a5ae16f4b2f299f4782829870f1603" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~289~g503bb2c5" rel="1.20260709120901565549.main.289.g503bb2c5.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~289~g503bb2c5-1.20260709120901565549.main.289.g503bb2c5" date="1783598400">- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e7c8f3ba80f4f1cc48ce8ad78f8eef4022afe403acbcbdda065b1b0f9a6852d7" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~291~g2eb9a30b" rel="1.20260709143909877108.main.291.g2eb9a30b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~291~g2eb9a30b-1.20260709143909877108.main.291.g2eb9a30b" date="1783598400">- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="0e57079b165bcc6248f46ce1aa23acc312e94033046ef92f6a61936c19f7adb9" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~292~ga5312331" rel="1.20260709181440362738.main.292.ga5312331.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~292~ga5312331-1.20260709181440362738.main.292.ga5312331" date="1783598400">- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="df812516ffc00078175799e0849f823e4826462a932f8059820d2d48e2eaa41f" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~293~ga8d08d5d" rel="1.20260710170135522345.main.293.ga8d08d5d.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~293~ga8d08d5d-1.20260710170135522345.main.293.ga8d08d5d" date="1783684800">- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c2063148fa13d5b4659aea21a15ba7bf459b57fa0b798c2829b1b7637d47eb07" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~294~g5aaf42fd" rel="1.20260712110344206097.main.294.g5aaf42fd.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~294~g5aaf42fd-1.20260712110344206097.main.294.g5aaf42fd" date="1783857600">- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="be1a0ff27d563f27ab75063cac4ff48c1bccffcb56887a499c5d99a739f375ec" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~295~g2d00934c" rel="1.20260712112216367559.main.295.g2d00934c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~295~g2d00934c-1.20260712112216367559.main.295.g2d00934c" date="1783857600">- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="45bb44b37c85ab67eb5b230d1f7ca360a2c5501c0535cbfc36a4e92621c3ea83" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~296~g31d8e417" rel="1.20260712114315982425.main.296.g31d8e417.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~296~g31d8e417-1.20260712114315982425.main.296.g31d8e417" date="1783857600">- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="fc8ea907923547bea741be508abe946b3044b05f99fea03911653b112374fda3" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~297~g6a975d27" rel="1.20260713083000484191.main.297.g6a975d27.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~297~g6a975d27-1.20260713083000484191.main.297.g6a975d27" date="1783944000">- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4a2ab008e1dc0ccdac29a796e5f4be6892467e1d5dbac902dc615591f4f023d5" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~298~g26576b84" rel="1.20260713122749032568.main.298.g26576b84.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~298~g26576b84-1.20260713122749032568.main.298.g26576b84" date="1783944000">- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f4bd374c9d05ddc44b7ad4cfa3f71ff9052b9f5f17327f226a256986393861f4" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~299~g74056159" rel="1.20260713170248892028.main.299.g74056159.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~299~g74056159-1.20260713170248892028.main.299.g74056159" date="1783944000">- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f4281d71d0d2e6a8af28c06d848d8354f7b21ee90e5623717a3557c387f38860" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~300~g8e7a3347" rel="1.20260713171655351650.main.300.g8e7a3347.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~300~g8e7a3347-1.20260713171655351650.main.300.g8e7a3347" date="1783944000">- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="75f217d624ff69ae17c1542a4d16335f2ce17901a0de06f6c1ab564e484a6560" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~301~ga9e93ea2" rel="1.20260713172252707910.main.301.ga9e93ea2.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~301~ga9e93ea2-1.20260713172252707910.main.301.ga9e93ea2" date="1783944000">- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="16b50b1e2bc70a6c9512dba61d6149d66d4f1de9e8f7d492546d0619f3a9bd6b" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~302~g9ef15314" rel="1.20260713205735699059.main.302.g9ef15314.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~302~g9ef15314-1.20260713205735699059.main.302.g9ef15314" date="1783944000">- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="53fdb4dfabfe3915fa87c8d885f01ef0d38bb31828e038f70e319526d36cdd1e" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~303~g07e259bc" rel="1.20260713213837055964.main.303.g07e259bc.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~303~g07e259bc-1.20260713213837055964.main.303.g07e259bc" date="1783944000">- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="63b7a6b0790f186a3a4c72ac35c162d34a99f948a560e2fd561716faf95b354c" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~304~ga26c4b12" rel="1.20260714072402617858.main.304.ga26c4b12.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~304~ga26c4b12-1.20260714072402617858.main.304.ga26c4b12" date="1784030400">- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="44439b386773263ae79045c9c3550a5166e4c1ae27e0106da2f360578142240e" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~305~g714cb9ec" rel="1.20260714103405955004.main.305.g714cb9ec.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~305~g714cb9ec-1.20260714103405955004.main.305.g714cb9ec" date="1784030400">- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9eaeac9bfb279b8ad3526a7473be2a3691e03f097b4d2b3ecfcc441bce2dcf64" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~306~gb06cc4d6" rel="1.20260714125059563022.main.306.gb06cc4d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~306~gb06cc4d6-1.20260714125059563022.main.306.gb06cc4d6" date="1784030400">- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4895c6691ec584470b8111df1e6a9253a023bd4228e9e23c1a473846e4d36cba" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~307~g6968d986" rel="1.20260715064543439701.main.307.g6968d986.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~307~g6968d986-1.20260715064543439701.main.307.g6968d986" date="1784116800">- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="bd81b84e42773d52741e07b3c35f58afefa9214f257eda49cbadb131493cb0a3" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~308~gcba6f9b1" rel="1.20260715093150331298.main.308.gcba6f9b1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~308~gcba6f9b1-1.20260715093150331298.main.308.gcba6f9b1" date="1784116800">- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f935e8e67aeaff5ae376437baa57df26b4199ca485bc4a42484c2ef432fa678e" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~309~ge2adb1d6" rel="1.20260715104653276333.main.309.ge2adb1d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~309~ge2adb1d6-1.20260715104653276333.main.309.ge2adb1d6" date="1784116800">- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="81e9cbcb6638289daac17a3987a55886fe88648984522d99e080737a00a9c10c" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~310~g72559a5f" rel="1.20260715110954091718.main.310.g72559a5f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~310~g72559a5f-1.20260715110954091718.main.310.g72559a5f" date="1784116800">- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="7ef97d5207503b8741bb632b0bc8261c7cf713380ce3c2850b210463c8e9edfd" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~311~g45b8dcd1" rel="1.20260715111938741870.main.311.g45b8dcd1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~311~g45b8dcd1-1.20260715111938741870.main.311.g45b8dcd1" date="1784116800">- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="86ace6f77b54c770d56fbe93044efa3e49299ea4325c7dca7095fdeceefce24a" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~312~g144d37ab" rel="1.20260715131803155366.main.312.g144d37ab.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~312~g144d37ab-1.20260715131803155366.main.312.g144d37ab" date="1784116800">- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="43760bb6beab54f10b043f6a7e6aad93295ba25a83f27b58b670c32b6e93f299" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~313~g33e5a2b3" rel="1.20260715134647812046.main.313.g33e5a2b3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~313~g33e5a2b3-1.20260715134647812046.main.313.g33e5a2b3" date="1784116800">- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="feec3b68b47414730394b87dc03fcbfc15de7f920229c5c002680cb452ae2112" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~314~g0f81c9db" rel="1.20260716122029449110.main.314.g0f81c9db.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~314~g0f81c9db-1.20260716122029449110.main.314.g0f81c9db" date="1784203200">- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="50083e9046aec36504dfc775fec43a68f1448b8061dfeb287c5a056b719f4981" name="flightctl" arch="src">
  <version epoch="0" ver="1.3.0~main~315~g51bce98f" rel="1.20260716142205876797.main.315.g51bce98f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~315~g51bce98f-1.20260716142205876797.main.315.g51bce98f" date="1784203200">- EDM-2392: Adjust observability tests to run on quadlets and OCP (#3175) (Itzik Brown)
- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="186a04ddcbc501d0074a63c0626274e0b891cb4ae13fe4b136982c32311d97d7" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~272~ge4c489e1" rel="1.20260702083056866245.main.272.ge4c489e1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~272~ge4c489e1-1.20260702083056866245.main.272.ge4c489e1" date="1782993600">- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="56f11be7b3b8c79023086b7aa138ae0b153d9abb9802a19fb70940c3a4b9baba" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~275~g15e5c0d3" rel="1.20260705062113984065.main.275.g15e5c0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~275~g15e5c0d3-1.20260705062113984065.main.275.g15e5c0d3" date="1783252800">- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="2042f25527dca479e701456b62927dcafb768b6593f510cc66223a0d6f08b7e4" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~276~g79d90e0b" rel="1.20260705084048010742.main.276.g79d90e0b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~276~g79d90e0b-1.20260705084048010742.main.276.g79d90e0b" date="1783252800">- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e3103eed09b31f1677ec90ce0db388a9d9798bf2f5a349b271836735a854d70a" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~277~g92597755" rel="1.20260705090528951244.main.277.g92597755.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~277~g92597755-1.20260705090528951244.main.277.g92597755" date="1783252800">- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="bec173b1ea6276acd22b236b2b7213e563b544063dafd82764ad6a4f9bbdde0f" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~278~ge4d56bea" rel="1.20260705102718544650.main.278.ge4d56bea.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~278~ge4d56bea-1.20260705102718544650.main.278.ge4d56bea" date="1783252800">- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="42ec8456555ed8418364857e65012ef56848e5dbf8cf2b5f2fc70104e64d4602" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~279~g5e657f9a" rel="1.20260706103919292593.main.279.g5e657f9a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~279~g5e657f9a-1.20260706103919292593.main.279.g5e657f9a" date="1783339200">- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c072b086f80caddefbce31e15b665f64208589c87ed88941a2f811aad7cd4a4d" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~280~gfd17722f" rel="1.20260706151411942403.main.280.gfd17722f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~280~gfd17722f-1.20260706151411942403.main.280.gfd17722f" date="1783339200">- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="512ba6d2fd18e0a3d08f8ffacca8663524806e04344c9c510fae848ba8ea6c44" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~281~ga53cdfe3" rel="1.20260706223619198122.main.281.ga53cdfe3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~281~ga53cdfe3-1.20260706223619198122.main.281.ga53cdfe3" date="1783339200">- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e5304fab5869fdef2d9bbc9213df9153feb507752040c61db407384208c8085f" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~282~gb8814533" rel="1.20260707080941577366.main.282.gb8814533.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~282~gb8814533-1.20260707080941577366.main.282.gb8814533" date="1783425600">- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="82567cace7860dcccd41e17b6822baab7a7faf65e0e4a75fafd5628e9a82868d" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~283~gcac8f0d3" rel="1.20260707202441753497.main.283.gcac8f0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~283~gcac8f0d3-1.20260707202441753497.main.283.gcac8f0d3" date="1783425600">- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="0965418865a83732287bb3100328b8c3f4b45856f87f54f2ff31bfa38e82410d" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~284~ge9e26e7c" rel="1.20260708063029767266.main.284.ge9e26e7c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~284~ge9e26e7c-1.20260708063029767266.main.284.ge9e26e7c" date="1783512000">- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="10011b473043384089591aa98cd09855482e0daf03eb1684c095cacc1c110b86" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~285~g1c011be3" rel="1.20260708121656129457.main.285.g1c011be3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~285~g1c011be3-1.20260708121656129457.main.285.g1c011be3" date="1783512000">- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9d35c27493fb660752a4432981fe32a210e48548cae320829716d8410424847e" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~286~g0a7a009a" rel="1.20260709063944354350.main.286.g0a7a009a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~286~g0a7a009a-1.20260709063944354350.main.286.g0a7a009a" date="1783598400">- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="34b078ca98a59f2e96334183add9e871c817cc00d44e234056a10fc8ff9a4f70" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~287~g9eee6407" rel="1.20260709100547687031.main.287.g9eee6407.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~287~g9eee6407-1.20260709100547687031.main.287.g9eee6407" date="1783598400">- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="2f66d294dc64ab2b39d93298cb193767cafe595ec3eca00f273f44a45f3a595c" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~288~g7ce7e95e" rel="1.20260709111602902675.main.288.g7ce7e95e.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~288~g7ce7e95e-1.20260709111602902675.main.288.g7ce7e95e" date="1783598400">- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ec47ebd7cf061c4939485cf5b7e08044c914eb62962de42938cc91b28ced02e7" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~289~g503bb2c5" rel="1.20260709120901565549.main.289.g503bb2c5.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~289~g503bb2c5-1.20260709120901565549.main.289.g503bb2c5" date="1783598400">- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f5bfca66a9afafa14d2d63241246e024f7cfc52a52fe0a97f9b303fdd70e8f85" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~291~g2eb9a30b" rel="1.20260709143909877108.main.291.g2eb9a30b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~291~g2eb9a30b-1.20260709143909877108.main.291.g2eb9a30b" date="1783598400">- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ee0549dd7a942bf15cab4a3ddc30df2b8d9dfe8af84b3f9751bf14572e81e669" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~292~ga5312331" rel="1.20260709181440362738.main.292.ga5312331.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~292~ga5312331-1.20260709181440362738.main.292.ga5312331" date="1783598400">- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="69f8cbb09d3bc03504f63bcb76eeb8be0b185d00debfbe9b32952d327f396c66" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~293~ga8d08d5d" rel="1.20260710170135522345.main.293.ga8d08d5d.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~293~ga8d08d5d-1.20260710170135522345.main.293.ga8d08d5d" date="1783684800">- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="510f702aab5096d5019d14d2468ad854445ef0959347dd0830769590945a411b" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~294~g5aaf42fd" rel="1.20260712110344206097.main.294.g5aaf42fd.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~294~g5aaf42fd-1.20260712110344206097.main.294.g5aaf42fd" date="1783857600">- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="304eeb81eecb338bef420999a665133da3e6485adc33b242e2c71dd389a009ae" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~295~g2d00934c" rel="1.20260712112216367559.main.295.g2d00934c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~295~g2d00934c-1.20260712112216367559.main.295.g2d00934c" date="1783857600">- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="55624d4d41a2105ce19d62e7bd8fe4973d3c87e77e0fc1972a5d05a7400fb8ca" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~296~g31d8e417" rel="1.20260712114315982425.main.296.g31d8e417.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~296~g31d8e417-1.20260712114315982425.main.296.g31d8e417" date="1783857600">- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="0fb610a1aec9ababdc8a0bdc03046078a222afd85d106afb1bc71e7d1d0e684a" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~297~g6a975d27" rel="1.20260713083000484191.main.297.g6a975d27.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~297~g6a975d27-1.20260713083000484191.main.297.g6a975d27" date="1783944000">- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="dfa6f48be2569883a0a48996a1f8fee11130e77112e0314d389da4a3cb3e389c" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~298~g26576b84" rel="1.20260713122749032568.main.298.g26576b84.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~298~g26576b84-1.20260713122749032568.main.298.g26576b84" date="1783944000">- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e98539ce4f822e03021566b0a366bee2c1661073ef5d607345fcb183a3e4180b" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~299~g74056159" rel="1.20260713170248892028.main.299.g74056159.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~299~g74056159-1.20260713170248892028.main.299.g74056159" date="1783944000">- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1f0bfde6061da953f6b5ebec35c2e96e79a1b8be628bb727b48b699c6fd8e182" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~300~g8e7a3347" rel="1.20260713171655351650.main.300.g8e7a3347.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~300~g8e7a3347-1.20260713171655351650.main.300.g8e7a3347" date="1783944000">- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1cf5371a910fa722a52eade7af344e043ed1507730d4ffd3c28b75e564bf86ac" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~301~ga9e93ea2" rel="1.20260713172252707910.main.301.ga9e93ea2.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~301~ga9e93ea2-1.20260713172252707910.main.301.ga9e93ea2" date="1783944000">- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="3b99983bc0841f0f0092bd48c40443b38329f7822a4466d2a00ddfc903d0886c" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~302~g9ef15314" rel="1.20260713205735699059.main.302.g9ef15314.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~302~g9ef15314-1.20260713205735699059.main.302.g9ef15314" date="1783944000">- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="cf62b2b75451683f77ce3e2b5c2e40639eb76c09f9b89e433a7eeabc762dca7f" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~303~g07e259bc" rel="1.20260713213837055964.main.303.g07e259bc.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~303~g07e259bc-1.20260713213837055964.main.303.g07e259bc" date="1783944000">- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="be4aebb5dea67570ba7ecc1edda88957c5edf565aa53f50d9b4cf91b65d6247c" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~304~ga26c4b12" rel="1.20260714072402617858.main.304.ga26c4b12.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~304~ga26c4b12-1.20260714072402617858.main.304.ga26c4b12" date="1784030400">- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="49a6aeda9a4d3e5ed65b1c7f5d2060df6355f8e932cbc31960c45cb72d481d80" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~305~g714cb9ec" rel="1.20260714103405955004.main.305.g714cb9ec.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~305~g714cb9ec-1.20260714103405955004.main.305.g714cb9ec" date="1784030400">- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="842eccfebbe9256401ec0c02587ca568d9fcaf0370bd04954295253aea9a54eb" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~306~gb06cc4d6" rel="1.20260714125059563022.main.306.gb06cc4d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~306~gb06cc4d6-1.20260714125059563022.main.306.gb06cc4d6" date="1784030400">- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8bc2dd3aeaaea2ed85ee4805c3dfc84221f256ece961419a6ed6907e47154ad4" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~307~g6968d986" rel="1.20260715064543439701.main.307.g6968d986.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~307~g6968d986-1.20260715064543439701.main.307.g6968d986" date="1784116800">- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1304730190f25caddcb7f7753abcf78ef0ce52022ef29fe2e72c177f477fbe85" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~308~gcba6f9b1" rel="1.20260715093150331298.main.308.gcba6f9b1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~308~gcba6f9b1-1.20260715093150331298.main.308.gcba6f9b1" date="1784116800">- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f9cd7323828355bf7d219a9b016a2f770798a00454cc83223e7e6c2023c3bb34" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~309~ge2adb1d6" rel="1.20260715104653276333.main.309.ge2adb1d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~309~ge2adb1d6-1.20260715104653276333.main.309.ge2adb1d6" date="1784116800">- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1cd8476d0346a59d2ad6c79161af1987626ec5fc5f5abe8eb67acce497a9055a" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~310~g72559a5f" rel="1.20260715110954091718.main.310.g72559a5f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~310~g72559a5f-1.20260715110954091718.main.310.g72559a5f" date="1784116800">- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8c3221e7c84ca6d17233878ebd97de233dd0433836aabdd8424806d3bef74e63" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~311~g45b8dcd1" rel="1.20260715111938741870.main.311.g45b8dcd1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~311~g45b8dcd1-1.20260715111938741870.main.311.g45b8dcd1" date="1784116800">- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d23fd8a2b201af85e1b1555462dbace22333a547f16f1aeeeeff81c7eff60e49" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~312~g144d37ab" rel="1.20260715131803155366.main.312.g144d37ab.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~312~g144d37ab-1.20260715131803155366.main.312.g144d37ab" date="1784116800">- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="7dc6ef44562b93ec0a03a3bd1b134acb6c97980ed7c8dd176f8acd2635372bc7" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~313~g33e5a2b3" rel="1.20260715134647812046.main.313.g33e5a2b3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~313~g33e5a2b3-1.20260715134647812046.main.313.g33e5a2b3" date="1784116800">- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="267bafeb00d11a8279c22cb180e8d7fffcbb8b9d2bbf136bd6101b079edcd973" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~314~g0f81c9db" rel="1.20260716122029449110.main.314.g0f81c9db.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~314~g0f81c9db-1.20260716122029449110.main.314.g0f81c9db" date="1784203200">- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c8ef1950f3ca734f17b43f9dc358c1cb5b563829176e9c05b2a936a547cb2448" name="flightctl-agent" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~315~g51bce98f" rel="1.20260716142205876797.main.315.g51bce98f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~315~g51bce98f-1.20260716142205876797.main.315.g51bce98f" date="1784203200">- EDM-2392: Adjust observability tests to run on quadlets and OCP (#3175) (Itzik Brown)
- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9653b936a5a894eb5e9ddd8502a21962036575c0f17cbcde92764f752cf051bc" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~272~ge4c489e1" rel="1.20260702083056866245.main.272.ge4c489e1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~272~ge4c489e1-1.20260702083056866245.main.272.ge4c489e1" date="1782993600">- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b956471d44c37063e61a0a11f49240dad99d26a2d6efc9641369d0c53189e929" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~275~g15e5c0d3" rel="1.20260705062113984065.main.275.g15e5c0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~275~g15e5c0d3-1.20260705062113984065.main.275.g15e5c0d3" date="1783252800">- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="31de5f43162cad363a0c47a52c41a2132c54a69c743195a21c9368af6cbb2350" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~276~g79d90e0b" rel="1.20260705084048010742.main.276.g79d90e0b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~276~g79d90e0b-1.20260705084048010742.main.276.g79d90e0b" date="1783252800">- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="31764153a4f79d1161b6051c82d7df7a78d6f907c6f37899ad512256c7e641cc" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~277~g92597755" rel="1.20260705090528951244.main.277.g92597755.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~277~g92597755-1.20260705090528951244.main.277.g92597755" date="1783252800">- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4abcb59e681ff5a2b2bff3bd5745928efb5cd0bace6fca91aa9bec86449a028b" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~278~ge4d56bea" rel="1.20260705102718544650.main.278.ge4d56bea.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~278~ge4d56bea-1.20260705102718544650.main.278.ge4d56bea" date="1783252800">- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="55bdca9f5275ddb97f762f48d46cbd999cc08b3bc322e6e7748b0d82229a697d" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~279~g5e657f9a" rel="1.20260706103919292593.main.279.g5e657f9a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~279~g5e657f9a-1.20260706103919292593.main.279.g5e657f9a" date="1783339200">- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="064d84c69b5ddfbfd4558bcd61a78503c7b436c4c407d92de3bff37445fc8def" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~280~gfd17722f" rel="1.20260706151411942403.main.280.gfd17722f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~280~gfd17722f-1.20260706151411942403.main.280.gfd17722f" date="1783339200">- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="161762d8cf645e60a0553d014cd444ecae21be80fb4b8dc3b132b91e97b4083d" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~281~ga53cdfe3" rel="1.20260706223619198122.main.281.ga53cdfe3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~281~ga53cdfe3-1.20260706223619198122.main.281.ga53cdfe3" date="1783339200">- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="abaaf84ac1d8c091ff1162d963250c710551a2aea00dae7b0baab67a918e40d4" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~282~gb8814533" rel="1.20260707080941577366.main.282.gb8814533.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~282~gb8814533-1.20260707080941577366.main.282.gb8814533" date="1783425600">- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="037134954bca641aa04224119493a069b3bc213a77115d6d0de18d574b1f523b" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~283~gcac8f0d3" rel="1.20260707202441753497.main.283.gcac8f0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~283~gcac8f0d3-1.20260707202441753497.main.283.gcac8f0d3" date="1783425600">- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4c188674ca58ced75803188c56c7f8a0ebc8a656ae2d70a56920839841228587" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~284~ge9e26e7c" rel="1.20260708063029767266.main.284.ge9e26e7c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~284~ge9e26e7c-1.20260708063029767266.main.284.ge9e26e7c" date="1783512000">- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="208aa3670a585a7ce27c0cf46f05529721b7b01bb976d0739560f6639117ea29" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~285~g1c011be3" rel="1.20260708121656129457.main.285.g1c011be3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~285~g1c011be3-1.20260708121656129457.main.285.g1c011be3" date="1783512000">- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="86be126e9228f52dd0f7727f37732a692903d6d0cfa534f484d04b3e1ef92584" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~286~g0a7a009a" rel="1.20260709063944354350.main.286.g0a7a009a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~286~g0a7a009a-1.20260709063944354350.main.286.g0a7a009a" date="1783598400">- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="49ac779ac06fceeb4e68d4bd91515f07dfa82cc3588173f9f1514490ceacc55c" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~287~g9eee6407" rel="1.20260709100547687031.main.287.g9eee6407.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~287~g9eee6407-1.20260709100547687031.main.287.g9eee6407" date="1783598400">- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="648e348ff3e1fc0e3d8afe91cf28921f1b725075fb0ff9e7db222036834a030a" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~288~g7ce7e95e" rel="1.20260709111602902675.main.288.g7ce7e95e.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~288~g7ce7e95e-1.20260709111602902675.main.288.g7ce7e95e" date="1783598400">- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ae8c9a0a98e22989d00c64cbf4c30a6cd57922f22f788fea0dfa4126d6ab2a88" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~289~g503bb2c5" rel="1.20260709120901565549.main.289.g503bb2c5.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~289~g503bb2c5-1.20260709120901565549.main.289.g503bb2c5" date="1783598400">- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b3cf65c951376ea67ae441d9cdad2111f39b89a353abdf11f094150abcce72a7" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~291~g2eb9a30b" rel="1.20260709143909877108.main.291.g2eb9a30b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~291~g2eb9a30b-1.20260709143909877108.main.291.g2eb9a30b" date="1783598400">- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b0f84e299285c1391aab704253d82897fd1c231dc813a6c1aed5b36490512eb9" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~292~ga5312331" rel="1.20260709181440362738.main.292.ga5312331.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~292~ga5312331-1.20260709181440362738.main.292.ga5312331" date="1783598400">- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e7c609725796eb9c12f1144f6d5631f2896ea8e09d04d3f8c3f4795eab404bf1" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~293~ga8d08d5d" rel="1.20260710170135522345.main.293.ga8d08d5d.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~293~ga8d08d5d-1.20260710170135522345.main.293.ga8d08d5d" date="1783684800">- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6ba182872c77d5c6095e899c5afbc304178b622eaae7db20073a2968d3387f1a" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~294~g5aaf42fd" rel="1.20260712110344206097.main.294.g5aaf42fd.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~294~g5aaf42fd-1.20260712110344206097.main.294.g5aaf42fd" date="1783857600">- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1c07029b5da15c78a16dcbd1cdeda74b59c365ab97eb6fe8e6b859b3af2a4477" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~295~g2d00934c" rel="1.20260712112216367559.main.295.g2d00934c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~295~g2d00934c-1.20260712112216367559.main.295.g2d00934c" date="1783857600">- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9c1998b7dcb4e3316914478cb6e0cf2505c33ddb68e6f7ab7c413e4aa2c9e699" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~296~g31d8e417" rel="1.20260712114315982425.main.296.g31d8e417.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~296~g31d8e417-1.20260712114315982425.main.296.g31d8e417" date="1783857600">- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="5d9e943f1ddbf434c396938c2139d86f04dbdad887919ba0fb7e4566b363a42b" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~297~g6a975d27" rel="1.20260713083000484191.main.297.g6a975d27.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~297~g6a975d27-1.20260713083000484191.main.297.g6a975d27" date="1783944000">- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ca00c436c45cb6df1ecbf2c3cf6e9020cd70fff7d08860872d05448fd320f564" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~298~g26576b84" rel="1.20260713122749032568.main.298.g26576b84.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~298~g26576b84-1.20260713122749032568.main.298.g26576b84" date="1783944000">- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f943c7684e45a07f437b55c2b2926fd69a02d822f22e39a6ccb88429a3b702bb" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~299~g74056159" rel="1.20260713170248892028.main.299.g74056159.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~299~g74056159-1.20260713170248892028.main.299.g74056159" date="1783944000">- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d75c18b8284e3af468a13970755853bd80a89f36589dac9f598aea0c4043393f" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~300~g8e7a3347" rel="1.20260713171655351650.main.300.g8e7a3347.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~300~g8e7a3347-1.20260713171655351650.main.300.g8e7a3347" date="1783944000">- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="3de99cc6ca7683641f1b967ce897c208b7ec2c159e6989efe4995a3477036781" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~301~ga9e93ea2" rel="1.20260713172252707910.main.301.ga9e93ea2.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~301~ga9e93ea2-1.20260713172252707910.main.301.ga9e93ea2" date="1783944000">- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9fcec6d36b9d07c6427f523ef8ef1027c56a87b9d26750cb6561177d45a23b32" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~302~g9ef15314" rel="1.20260713205735699059.main.302.g9ef15314.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~302~g9ef15314-1.20260713205735699059.main.302.g9ef15314" date="1783944000">- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="87f5935dc05974a2e7358fa83a8d5fb6ef8a77a9fcb053b6fadd6f1cad29d467" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~303~g07e259bc" rel="1.20260713213837055964.main.303.g07e259bc.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~303~g07e259bc-1.20260713213837055964.main.303.g07e259bc" date="1783944000">- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="105c41652c296777d2b65ab5b8ba1f8372affb28416e045c5fc6fa55d17d2931" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~304~ga26c4b12" rel="1.20260714072402617858.main.304.ga26c4b12.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~304~ga26c4b12-1.20260714072402617858.main.304.ga26c4b12" date="1784030400">- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="fc6414bddc4b67d3d9ab9d5a8b785660862fa6bfde5c76854c6d48971c17647c" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~305~g714cb9ec" rel="1.20260714103405955004.main.305.g714cb9ec.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~305~g714cb9ec-1.20260714103405955004.main.305.g714cb9ec" date="1784030400">- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9dd59f5ce507af09eac6655dea1ec2e538aac885e05861ee461846b5d3f3e907" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~306~gb06cc4d6" rel="1.20260714125059563022.main.306.gb06cc4d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~306~gb06cc4d6-1.20260714125059563022.main.306.gb06cc4d6" date="1784030400">- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ddbbde858622aeeb82ff02a2a2e54dd1efa5c1da0f0b111d12cfd92f032b641b" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~307~g6968d986" rel="1.20260715064543439701.main.307.g6968d986.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~307~g6968d986-1.20260715064543439701.main.307.g6968d986" date="1784116800">- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="53e776999ff4c45544c7a1f2df3aab4536ca3037f99e709e9fb24c25f390c2c4" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~308~gcba6f9b1" rel="1.20260715093150331298.main.308.gcba6f9b1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~308~gcba6f9b1-1.20260715093150331298.main.308.gcba6f9b1" date="1784116800">- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="937506ccb464d221459b640c539c1fa36531801809b9ed3858063eb948441bc7" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~309~ge2adb1d6" rel="1.20260715104653276333.main.309.ge2adb1d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~309~ge2adb1d6-1.20260715104653276333.main.309.ge2adb1d6" date="1784116800">- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="bdb16deb17891565550c8d2a221fbf7dfa1418e99061950e6f81c2269eae6591" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~310~g72559a5f" rel="1.20260715110954091718.main.310.g72559a5f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~310~g72559a5f-1.20260715110954091718.main.310.g72559a5f" date="1784116800">- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="7dcdae2b6a9fb08478b4afe4518607cfc4a0e26807c9d6687ae995ff0b13cbbe" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~311~g45b8dcd1" rel="1.20260715111938741870.main.311.g45b8dcd1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~311~g45b8dcd1-1.20260715111938741870.main.311.g45b8dcd1" date="1784116800">- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e4760d4f081c6f95e5daa1e47e0a2245905a7a38343238e7009d574ed621463e" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~312~g144d37ab" rel="1.20260715131803155366.main.312.g144d37ab.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~312~g144d37ab-1.20260715131803155366.main.312.g144d37ab" date="1784116800">- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a8d16ac05e8700adbeff887a5ef70ed3dade77cd83d47d5e378d9ec253f18a3c" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~313~g33e5a2b3" rel="1.20260715134647812046.main.313.g33e5a2b3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~313~g33e5a2b3-1.20260715134647812046.main.313.g33e5a2b3" date="1784116800">- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="75b7802cafc3ff541542399e65ded0e3e32a862c08692a432775b3df56f4142b" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~314~g0f81c9db" rel="1.20260716122029449110.main.314.g0f81c9db.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~314~g0f81c9db-1.20260716122029449110.main.314.g0f81c9db" date="1784203200">- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="36c6ec4c209816a7e3fa857054901f7185b522808d658c43ce3e7110dba1f7df" name="flightctl-cli" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~315~g51bce98f" rel="1.20260716142205876797.main.315.g51bce98f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~315~g51bce98f-1.20260716142205876797.main.315.g51bce98f" date="1784203200">- EDM-2392: Adjust observability tests to run on quadlets and OCP (#3175) (Itzik Brown)
- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9d7116ee090e678674df0a6401afa46663282b1aa4db9194f465c8e9895ecc2b" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~272~ge4c489e1" rel="1.20260702083056866245.main.272.ge4c489e1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~272~ge4c489e1-1.20260702083056866245.main.272.ge4c489e1" date="1782993600">- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="39b0d10cd30ed9e528f0dfe6db6283ccda88c8327b3e4eec6b54bf56cdbb9dc0" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~275~g15e5c0d3" rel="1.20260705062113984065.main.275.g15e5c0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~275~g15e5c0d3-1.20260705062113984065.main.275.g15e5c0d3" date="1783252800">- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a20b53b1984f6969548ef65ea036b08d24d575d7a2a70cbd4669b187f5821022" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~276~g79d90e0b" rel="1.20260705084048010742.main.276.g79d90e0b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~276~g79d90e0b-1.20260705084048010742.main.276.g79d90e0b" date="1783252800">- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d342a37081dd457d31b76b1ed32b50915a7b6607178dee07a3a5156cd316e9d3" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~277~g92597755" rel="1.20260705090528951244.main.277.g92597755.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~277~g92597755-1.20260705090528951244.main.277.g92597755" date="1783252800">- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="90fe3959b237111bf017f45b4be247f90ea4634c22c5ec94f0930c4db816446e" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~278~ge4d56bea" rel="1.20260705102718544650.main.278.ge4d56bea.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~278~ge4d56bea-1.20260705102718544650.main.278.ge4d56bea" date="1783252800">- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="14b9a20dbae9903fd7a6fbd6f4e1d5af39d330be1993de638ffed25c74ce3782" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~279~g5e657f9a" rel="1.20260706103919292593.main.279.g5e657f9a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~279~g5e657f9a-1.20260706103919292593.main.279.g5e657f9a" date="1783339200">- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c53d25ff8719d00456bb98e21c7af83145ce18202067eb7e93ffc6ef8047e91f" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~280~gfd17722f" rel="1.20260706151411942403.main.280.gfd17722f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~280~gfd17722f-1.20260706151411942403.main.280.gfd17722f" date="1783339200">- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9a85c1d032b8e0f04e0710b9e7f55562e1676ffda3b3b87317157d4714b5a8cb" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~281~ga53cdfe3" rel="1.20260706223619198122.main.281.ga53cdfe3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~281~ga53cdfe3-1.20260706223619198122.main.281.ga53cdfe3" date="1783339200">- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e7d9f0926908e3584b3447f8374ab68d29293ea4df41398316a1f725832d6e90" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~282~gb8814533" rel="1.20260707080941577366.main.282.gb8814533.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~282~gb8814533-1.20260707080941577366.main.282.gb8814533" date="1783425600">- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f9e97da4a5c7f1e9aa286341e8a03bd3573a96260093fb2d5e53aea1c39ab3a9" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~283~gcac8f0d3" rel="1.20260707202441753497.main.283.gcac8f0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~283~gcac8f0d3-1.20260707202441753497.main.283.gcac8f0d3" date="1783425600">- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="787e15db8bc7cf65966aa08bfa4479b348b4700fe0e15ab44a54d97d44462f68" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~284~ge9e26e7c" rel="1.20260708063029767266.main.284.ge9e26e7c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~284~ge9e26e7c-1.20260708063029767266.main.284.ge9e26e7c" date="1783512000">- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="236d3e46593309a786628a17c26a74b97533e980eee04ec80a0a5e9bb490ece1" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~285~g1c011be3" rel="1.20260708121656129457.main.285.g1c011be3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~285~g1c011be3-1.20260708121656129457.main.285.g1c011be3" date="1783512000">- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4ee5dceb9e6bfb9eace2f3cbeec9b18ccc29294c6769d0cd3e7cd896a74cac3b" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~286~g0a7a009a" rel="1.20260709063944354350.main.286.g0a7a009a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~286~g0a7a009a-1.20260709063944354350.main.286.g0a7a009a" date="1783598400">- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="79c1e4fa3705be7d1d2386876db62b84f8370ebc226153c938253e86726a7e44" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~287~g9eee6407" rel="1.20260709100547687031.main.287.g9eee6407.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~287~g9eee6407-1.20260709100547687031.main.287.g9eee6407" date="1783598400">- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9df55cf50d3798fbe2978b92061b3e3ecbd324fa58ac3b5769361ab3afed538f" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~288~g7ce7e95e" rel="1.20260709111602902675.main.288.g7ce7e95e.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~288~g7ce7e95e-1.20260709111602902675.main.288.g7ce7e95e" date="1783598400">- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="068a72c50a87ec6182777219059c6059d148df11ddea4707422e15abc1809ab6" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~289~g503bb2c5" rel="1.20260709120901565549.main.289.g503bb2c5.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~289~g503bb2c5-1.20260709120901565549.main.289.g503bb2c5" date="1783598400">- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9519d4992b9e81e79de72166e9e7618c6debcae15eaf5b60da87ce7e07aa2f8c" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~291~g2eb9a30b" rel="1.20260709143909877108.main.291.g2eb9a30b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~291~g2eb9a30b-1.20260709143909877108.main.291.g2eb9a30b" date="1783598400">- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="3d55e4d0fad31335c9c48027039745c9a2ce2db6cb8af4fff55f75e36f3eb32c" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~292~ga5312331" rel="1.20260709181440362738.main.292.ga5312331.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~292~ga5312331-1.20260709181440362738.main.292.ga5312331" date="1783598400">- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="08b8648ebc471956031c6985edbafec75432af2b4c7ec1ca650f7daace17c318" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~293~ga8d08d5d" rel="1.20260710170135522345.main.293.ga8d08d5d.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~293~ga8d08d5d-1.20260710170135522345.main.293.ga8d08d5d" date="1783684800">- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="295793c6b863c6fb879bf52463e93c70ed929a0a6b859f5bb7bd078351808c57" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~294~g5aaf42fd" rel="1.20260712110344206097.main.294.g5aaf42fd.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~294~g5aaf42fd-1.20260712110344206097.main.294.g5aaf42fd" date="1783857600">- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ff3b7332b6b64cb30f4607d2696adb788c6c6f1904d40c0caf955986d009e4b2" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~295~g2d00934c" rel="1.20260712112216367559.main.295.g2d00934c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~295~g2d00934c-1.20260712112216367559.main.295.g2d00934c" date="1783857600">- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="25df3a45a2c1f51fb96190f32b8808f013720d0bf47dd2071b2a4730ccb5fe47" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~296~g31d8e417" rel="1.20260712114315982425.main.296.g31d8e417.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~296~g31d8e417-1.20260712114315982425.main.296.g31d8e417" date="1783857600">- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8afb33719827b1d9242ab0ee0c5b5d63f7aaceb21944512ca1a144b404ed22b6" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~297~g6a975d27" rel="1.20260713083000484191.main.297.g6a975d27.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~297~g6a975d27-1.20260713083000484191.main.297.g6a975d27" date="1783944000">- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="cbdc3737086b0dbfaf185a69eecdd600a1bd683289e4494db1187d95999bb459" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~298~g26576b84" rel="1.20260713122749032568.main.298.g26576b84.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~298~g26576b84-1.20260713122749032568.main.298.g26576b84" date="1783944000">- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="fb382ab116900d7c91a1c564d39588bf42c492f6082a73c9fda0dbcffbfd74bc" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~299~g74056159" rel="1.20260713170248892028.main.299.g74056159.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~299~g74056159-1.20260713170248892028.main.299.g74056159" date="1783944000">- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="461b53d19bedc9ee3b77fa84fbe67cccfd3618333a80dfd53a358d102172c931" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~300~g8e7a3347" rel="1.20260713171655351650.main.300.g8e7a3347.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~300~g8e7a3347-1.20260713171655351650.main.300.g8e7a3347" date="1783944000">- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9be6c25c0400a2f170a6e9f9d1ec565e0b867ab9a3dd34a8e6419f2a1bdb886e" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~301~ga9e93ea2" rel="1.20260713172252707910.main.301.ga9e93ea2.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~301~ga9e93ea2-1.20260713172252707910.main.301.ga9e93ea2" date="1783944000">- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e25df792cfeaae97b4b7ad539689cf32c9ac947944835914c45871ce526340ef" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~302~g9ef15314" rel="1.20260713205735699059.main.302.g9ef15314.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~302~g9ef15314-1.20260713205735699059.main.302.g9ef15314" date="1783944000">- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="def3092439c69f31059c7428eb282a31a0c02e8bb2ba244ebab339b8f349975d" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~303~g07e259bc" rel="1.20260713213837055964.main.303.g07e259bc.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~303~g07e259bc-1.20260713213837055964.main.303.g07e259bc" date="1783944000">- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ba78b6d68235512cf923aac43351d71799b081ec37d5272ebaf7d60f64993f13" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~304~ga26c4b12" rel="1.20260714072402617858.main.304.ga26c4b12.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~304~ga26c4b12-1.20260714072402617858.main.304.ga26c4b12" date="1784030400">- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6a549cb036e55620dfd9ee703e057ee281b8626ff95f1633cf2b3d6703b4fe28" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~305~g714cb9ec" rel="1.20260714103405955004.main.305.g714cb9ec.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~305~g714cb9ec-1.20260714103405955004.main.305.g714cb9ec" date="1784030400">- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4b7dbaade2bcc30a3a7e82862b325103d8c32b8475ddc51e51b023ece648c30b" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~306~gb06cc4d6" rel="1.20260714125059563022.main.306.gb06cc4d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~306~gb06cc4d6-1.20260714125059563022.main.306.gb06cc4d6" date="1784030400">- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="83a550d3cfc22e17c3bb51fefc4d2f083acc54ca93cef426e75cb110b416d457" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~307~g6968d986" rel="1.20260715064543439701.main.307.g6968d986.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~307~g6968d986-1.20260715064543439701.main.307.g6968d986" date="1784116800">- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="126e7ea106d8c062b0b43f7c00abb5aa28da025fc46f130d962895797830b54d" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~308~gcba6f9b1" rel="1.20260715093150331298.main.308.gcba6f9b1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~308~gcba6f9b1-1.20260715093150331298.main.308.gcba6f9b1" date="1784116800">- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="daedae8deb41f7cf1c14fdea35f0d2b112054f4cbf0afe50aae30b824cc3c7d1" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~309~ge2adb1d6" rel="1.20260715104653276333.main.309.ge2adb1d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~309~ge2adb1d6-1.20260715104653276333.main.309.ge2adb1d6" date="1784116800">- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6e3c23ce70d6d35254005e7c8ffd96416595897b9dcc59f818e284ee2b1cdb64" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~310~g72559a5f" rel="1.20260715110954091718.main.310.g72559a5f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~310~g72559a5f-1.20260715110954091718.main.310.g72559a5f" date="1784116800">- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="676df8c36a580ee1bef90d5c40ab03642a4efb6793dd341c6112863d6ee115f9" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~311~g45b8dcd1" rel="1.20260715111938741870.main.311.g45b8dcd1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~311~g45b8dcd1-1.20260715111938741870.main.311.g45b8dcd1" date="1784116800">- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d791ed6f2c89d0a64ab6f04a6c022a22bfc9aa024ee864c778d2dd8ecb50bd9d" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~312~g144d37ab" rel="1.20260715131803155366.main.312.g144d37ab.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~312~g144d37ab-1.20260715131803155366.main.312.g144d37ab" date="1784116800">- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4d6c11a78e69d70efc5545afbba0bb38d6dab4cb9fdf6a04bd019a46d1eabdb8" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~313~g33e5a2b3" rel="1.20260715134647812046.main.313.g33e5a2b3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~313~g33e5a2b3-1.20260715134647812046.main.313.g33e5a2b3" date="1784116800">- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9d9d464fb346e3296c9291f603f1b055ce32c6a159d9deccbcc84bb45f0d4751" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~314~g0f81c9db" rel="1.20260716122029449110.main.314.g0f81c9db.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~314~g0f81c9db-1.20260716122029449110.main.314.g0f81c9db" date="1784203200">- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b7b5517cd63d1473695f34bf70a66a83e05f22c66addf1857412f6987cde1aea" name="flightctl-observability" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~315~g51bce98f" rel="1.20260716142205876797.main.315.g51bce98f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~315~g51bce98f-1.20260716142205876797.main.315.g51bce98f" date="1784203200">- EDM-2392: Adjust observability tests to run on quadlets and OCP (#3175) (Itzik Brown)
- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f7c4ca430ea1e787a366aaddcb474477ae9e75839765a66582035cd2e6ef9117" name="flightctl-otel-collector" arch="x86_64">
  <version epoch="0" ver="0.10.0~main~85~g5d1c1d38" rel="1.20250813083749482438.main.85.g5d1c1d38.fc44"/>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.0.1-5" date="1724241600">- Add must-gather script to provide a simple mechanism to collect agent debug</changelog>
  <changelog author="Miguel Angel Ajo &lt;majopela@redhat.com&gt; - 0.3.0-1" date="1730721600">- Move the Release field to -1 so we avoid auto generating packages
  with -5 all the time.</changelog>
  <changelog author="Miguel Angel Ajo &lt;majopela@redhat.com&gt; - 0.4.0-1" date="1738929600">- Add selinux support for console pty access</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-1" date="1743422400">- Add services sub-package for installation of containerized flightctl services</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.6.0-2" date="1743681600">- Add sos report plugin support</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.0~main~85~g5d1c1d38-1.20250813083749482438.main.85.g5d1c1d38" date="1755086400">- EDM-1997: Annotate alerts with the event message (Avishay Traeger)
- EDM-1996: Emit single event for disconnected device (Avishay Traeger)
- EDM-1992: Agent SystemInfo smart collection (#1526) (kkyrazis)
- EDM-1476: add Events validation TCs (amalykhi)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-1821: test pass (Asaf Ben Natan)
- EDM-1821: added monitoring validation (Asaf Ben Natan)
- EDM-1993: Add restart configuration and polling for generated certificate files (Dakota Crowder)
- NO-ISSUE: publisher: call stop() before wg.Done() to fix flaky cancellation test (#1524) (Ilya)
- NO-ISSUE: Fix broken link in docs (Avishay Traeger)
- EDM-1987: Disallow label updates for owned fleets (Avishay Traeger)
- EDM-1712: fixed stuff based on PR reviews (Asaf Ben Natan)
- EDM-1712: Migrate HTTP metrics to OTEL (#1489) (Siddarth Royapally)
- EDM-1712: added tests renamed to domain metrics (asafbss)
- EDM-1845: signer refactoring: avoid parsing CSR multiple times, decouple from API layer (Ilya)
- EDM-1938: agent/dependency: ensure partial layer pull cleanup (Sam Batschelet)
- EDM-1818: Prefetch Manager Config Docs (#1514) (kkyrazis)
- EDM-1058: docs/user: add TPM related docs (Sam Batschelet)
- EDM-1058: internal/agent: small TPM api update (Sam Batschelet)
- EDM-1058: internal/service: refactor TPM csr logic (Sam Batschelet)
- EDM-1058: internal/tpm: ensure chain validaition (Sam Batschelet)
- NO-ISSUE: Event fixes (Avishay Traeger)
- EDM-1170: Fix Makefile (#1490) (Siddarth Royapally)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-799:Decommission test CLI (Samuel de la Cruz)
- EDM-1946: labels endpoint with field-selector=metadata.labels returns error 400 (#1495) (noga-magen)
- EDM-1058: internal/tpm: ensure conditions are maintained during approval (Sam Batschelet)
- EDM-1058: Fix simulator tests and flush key bug (Kyle Kyrazis)
- EDM-1058: Testing TPM Ownership Auth (Kyle Kyrazis)
- EDM-1058: Implement TPM-rooted device identities (Sam Batschelet)
- EDM-1869: Add missing events (Avishay Traeger)
- NO-ISSUE: reverting EDM-1871 (noga-magen)
- EDM-626: Add Git support for test harness (#1328) (Siddarth Royapally)
- EDM-1958: Fix Device UpdateStatus event panics (#1482) (kkyrazis)
- NO-ISSUE: Add io.openshift.tags to db-setup container (#1486) (Assaf Albo)
- EDM-1170: Auto-discover VM IP for agent updates (#1393) (Siddarth Royapally)
- EDM-1845: middleware agent cert OrgID support (#1471) (Ilya)
- NO-ISSUE: no need to keep rpms in gh-pages (#1477) (Gregory Shilin)
- EDM-1952: Add middlewares alertmanager proxy (Avishay Traeger)
- EDM-1838: deny DELETE ER  when device exists (#1415) (Ilya)
- NO-ISSUE: fix version generation for COPR for release (#1468) (Gregory Shilin)
- EDM-1944: setting Enforcing selinux in microshift registartion E2E test (sserafin)
- EDM-1942: Redact passwords when config is logged (Dakota Crowder)
- EDM-1936: Fix Router group order to make auth/validate reachable (rawagner)
- EDM-1846: orgs cli support (#1424) (Ilya)
- NO-ISSUE: Add VM_DISK_SIZE_INC to set the disk size increment in vm (Itzik Brown)
- EDM-1766: Small SELinux Related Tweaks (Ben Keith)</changelog>
</package>
<package pkgid="d638eb7be92484b1e0ab397998a72345b8e7bfa6ef88cd79e00e050348450689" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~272~ge4c489e1" rel="1.20260702083056866245.main.272.ge4c489e1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~272~ge4c489e1-1.20260702083056866245.main.272.ge4c489e1" date="1782993600">- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ee635e1f4ef8d3efa95784d9894cefb20b5e4764a1efac019180a108587d0f40" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~275~g15e5c0d3" rel="1.20260705062113984065.main.275.g15e5c0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~275~g15e5c0d3-1.20260705062113984065.main.275.g15e5c0d3" date="1783252800">- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6b5c19cc54d859a511fc334637696d31ca8ecc8938b937880b9b47587cc37f16" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~276~g79d90e0b" rel="1.20260705084048010742.main.276.g79d90e0b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~276~g79d90e0b-1.20260705084048010742.main.276.g79d90e0b" date="1783252800">- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="fe2295e6f64fd4939ba2423c7aafb0a33ddb468461d1794d217eec008eb5d45d" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~277~g92597755" rel="1.20260705090528951244.main.277.g92597755.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~277~g92597755-1.20260705090528951244.main.277.g92597755" date="1783252800">- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4e0d3d601094faee73af9a72a2197c19aa69c61d6bb4eedc0d8908a067520bc4" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~278~ge4d56bea" rel="1.20260705102718544650.main.278.ge4d56bea.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~278~ge4d56bea-1.20260705102718544650.main.278.ge4d56bea" date="1783252800">- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1b0395d672e853079e86edfe7438be08d81231222bdfcf99e5614d60d6620616" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~279~g5e657f9a" rel="1.20260706103919292593.main.279.g5e657f9a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~279~g5e657f9a-1.20260706103919292593.main.279.g5e657f9a" date="1783339200">- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="adcb7d81c753ffe58cdec5e1e19b4dcd82e7d82f06edac31649716738d833910" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~280~gfd17722f" rel="1.20260706151411942403.main.280.gfd17722f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~280~gfd17722f-1.20260706151411942403.main.280.gfd17722f" date="1783339200">- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a026190a5dcb50b655c2c6b8f54a0c078d74cd52d9e8366f235d01c00c7e49b0" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~281~ga53cdfe3" rel="1.20260706223619198122.main.281.ga53cdfe3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~281~ga53cdfe3-1.20260706223619198122.main.281.ga53cdfe3" date="1783339200">- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8219ce695e8fd68e98804e3a50c86cbe61f73d762be21e00dfee8a5ff0035b11" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~282~gb8814533" rel="1.20260707080941577366.main.282.gb8814533.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~282~gb8814533-1.20260707080941577366.main.282.gb8814533" date="1783425600">- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b127de7c77a9fb104f7253b1ff7236cf637b681b597a0a8fa338c462128b6111" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~283~gcac8f0d3" rel="1.20260707202441753497.main.283.gcac8f0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~283~gcac8f0d3-1.20260707202441753497.main.283.gcac8f0d3" date="1783425600">- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="89c670981dcb5562eacabd202c0df3189f39c949259a8fbe0d49afe4def6a6b0" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~284~ge9e26e7c" rel="1.20260708063029767266.main.284.ge9e26e7c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~284~ge9e26e7c-1.20260708063029767266.main.284.ge9e26e7c" date="1783512000">- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="eab930af3de01fa69db77e5511a9b014423d7286e357eef040fbc1b61815a407" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~285~g1c011be3" rel="1.20260708121656129457.main.285.g1c011be3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~285~g1c011be3-1.20260708121656129457.main.285.g1c011be3" date="1783512000">- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a88ddc7526cd16ed79e617571d7d07bfa75be68e5084d801e9dd1e33256c15a6" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~286~g0a7a009a" rel="1.20260709063944354350.main.286.g0a7a009a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~286~g0a7a009a-1.20260709063944354350.main.286.g0a7a009a" date="1783598400">- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a17495c18517f1bac1765ea3b01bb4925da8667015c1876a1fc0011678539b19" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~287~g9eee6407" rel="1.20260709100547687031.main.287.g9eee6407.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~287~g9eee6407-1.20260709100547687031.main.287.g9eee6407" date="1783598400">- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="931f72bb0c7d0953acf63ca0757f573e8d6bbd4a6bd8e5bd5944e02d35c4e186" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~288~g7ce7e95e" rel="1.20260709111602902675.main.288.g7ce7e95e.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~288~g7ce7e95e-1.20260709111602902675.main.288.g7ce7e95e" date="1783598400">- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="dca601b060dcb4073bae01df05bac67463d7468957c395428ca3876f2412cef1" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~289~g503bb2c5" rel="1.20260709120901565549.main.289.g503bb2c5.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~289~g503bb2c5-1.20260709120901565549.main.289.g503bb2c5" date="1783598400">- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="685875c59c4b7f8b5bdd7721a61d77d2d2abc4233985d69d468b19cbe5d6937b" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~291~g2eb9a30b" rel="1.20260709143909877108.main.291.g2eb9a30b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~291~g2eb9a30b-1.20260709143909877108.main.291.g2eb9a30b" date="1783598400">- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e13312d154c3a1b1da9421b252efb90ab274f5f7d3f41fdf0eccfd3d45c56aa8" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~292~ga5312331" rel="1.20260709181440362738.main.292.ga5312331.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~292~ga5312331-1.20260709181440362738.main.292.ga5312331" date="1783598400">- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="e2a9faad2d4f65d9ed2a929e5803c88f6f54e7ebc772c0604151d5939ed27982" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~293~ga8d08d5d" rel="1.20260710170135522345.main.293.ga8d08d5d.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~293~ga8d08d5d-1.20260710170135522345.main.293.ga8d08d5d" date="1783684800">- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="10a54f809659d23083aa2140c4a360690a316c2e869b0e1d9f5b3689da03b778" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~294~g5aaf42fd" rel="1.20260712110344206097.main.294.g5aaf42fd.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~294~g5aaf42fd-1.20260712110344206097.main.294.g5aaf42fd" date="1783857600">- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4f86552297161c31701e56be407df88766ca58b3554efd1ff429f9db5ee4d0a7" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~295~g2d00934c" rel="1.20260712112216367559.main.295.g2d00934c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~295~g2d00934c-1.20260712112216367559.main.295.g2d00934c" date="1783857600">- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="98ae968d3c347d21028e97818e8a6b9537a10444b06df0d0b450cd423362a27e" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~296~g31d8e417" rel="1.20260712114315982425.main.296.g31d8e417.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~296~g31d8e417-1.20260712114315982425.main.296.g31d8e417" date="1783857600">- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="48214d74c50b7b40cb4c75871e9354cb5bda6be9ed692b1dfbb292fcc257f067" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~297~g6a975d27" rel="1.20260713083000484191.main.297.g6a975d27.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~297~g6a975d27-1.20260713083000484191.main.297.g6a975d27" date="1783944000">- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="3e1a71c86ac9d6eb9d48f995b186e9b5ce6231fd598db0c037f2b3254d535cf4" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~298~g26576b84" rel="1.20260713122749032568.main.298.g26576b84.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~298~g26576b84-1.20260713122749032568.main.298.g26576b84" date="1783944000">- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="063c39446ae61cff422540744cbfc4bcc374c5c75a93698577fb81470a0c9176" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~299~g74056159" rel="1.20260713170248892028.main.299.g74056159.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~299~g74056159-1.20260713170248892028.main.299.g74056159" date="1783944000">- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b90059783b85020c26cbdd969c70046bbe4202301bef5a4582d13a913a1130cb" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~300~g8e7a3347" rel="1.20260713171655351650.main.300.g8e7a3347.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~300~g8e7a3347-1.20260713171655351650.main.300.g8e7a3347" date="1783944000">- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="493a9365a9cb3d73fe50b4df0594c8e8dd070a4917923bf138e857ae7db9860c" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~301~ga9e93ea2" rel="1.20260713172252707910.main.301.ga9e93ea2.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~301~ga9e93ea2-1.20260713172252707910.main.301.ga9e93ea2" date="1783944000">- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6ddb5d9c1167d570a093f2aa1f1e43ef42fd5a18b9542087fea2c52424604bf6" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~302~g9ef15314" rel="1.20260713205735699059.main.302.g9ef15314.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~302~g9ef15314-1.20260713205735699059.main.302.g9ef15314" date="1783944000">- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="afc681530bebc156af616549db7d3969e5d9bbe898df13c53aa8262b10bd9659" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~303~g07e259bc" rel="1.20260713213837055964.main.303.g07e259bc.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~303~g07e259bc-1.20260713213837055964.main.303.g07e259bc" date="1783944000">- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8326423eb352729f6d22a53b3e92e7a8195f6cf7698ca3c6f07fa2454421e928" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~304~ga26c4b12" rel="1.20260714072402617858.main.304.ga26c4b12.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~304~ga26c4b12-1.20260714072402617858.main.304.ga26c4b12" date="1784030400">- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="90f3582ae684807f66947bd1d28b42d05a9bf7c5cbc2e48d1c9f742ff13d0be9" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~305~g714cb9ec" rel="1.20260714103405955004.main.305.g714cb9ec.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~305~g714cb9ec-1.20260714103405955004.main.305.g714cb9ec" date="1784030400">- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ae9fc49c8a24d86bde3353e6c090670280d70c16d07ceae5e6dbc07b146b9199" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~306~gb06cc4d6" rel="1.20260714125059563022.main.306.gb06cc4d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~306~gb06cc4d6-1.20260714125059563022.main.306.gb06cc4d6" date="1784030400">- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="dabd337e7d222ef83f2dee4529ffb4f8fc94a9831c45649d9552e901be86f062" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~307~g6968d986" rel="1.20260715064543439701.main.307.g6968d986.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~307~g6968d986-1.20260715064543439701.main.307.g6968d986" date="1784116800">- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="f0dc6e1aceb428a0fc812ffc0dc63c2b0db846c8021f66f793b34a23f5be247f" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~308~gcba6f9b1" rel="1.20260715093150331298.main.308.gcba6f9b1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~308~gcba6f9b1-1.20260715093150331298.main.308.gcba6f9b1" date="1784116800">- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b2cc3dc57bcd1bbc2d630c89763198873d332dc5ce4532a4d53b977fa1af9fcf" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~309~ge2adb1d6" rel="1.20260715104653276333.main.309.ge2adb1d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~309~ge2adb1d6-1.20260715104653276333.main.309.ge2adb1d6" date="1784116800">- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="3281bad1754b1250fa1696246493008fe21e286e1ce6a20ea5127796fb6bf7f8" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~310~g72559a5f" rel="1.20260715110954091718.main.310.g72559a5f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~310~g72559a5f-1.20260715110954091718.main.310.g72559a5f" date="1784116800">- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1dda5ae391d5c6e6a89f1da1aaf552ec406dc02eebcb78a148427dcc81006ea2" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~311~g45b8dcd1" rel="1.20260715111938741870.main.311.g45b8dcd1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~311~g45b8dcd1-1.20260715111938741870.main.311.g45b8dcd1" date="1784116800">- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="a4f7f37a3da9f4779b3d757b5a23fef8fb17d642dc00dbf70c4cefc8645a832b" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~312~g144d37ab" rel="1.20260715131803155366.main.312.g144d37ab.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~312~g144d37ab-1.20260715131803155366.main.312.g144d37ab" date="1784116800">- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="dfb3213df53f4b85ef9c2b7e5a05b99de1136fef00e3410b443f56b208775f37" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~313~g33e5a2b3" rel="1.20260715134647812046.main.313.g33e5a2b3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~313~g33e5a2b3-1.20260715134647812046.main.313.g33e5a2b3" date="1784116800">- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ec9cec51da7f5e057808fa7a338e59e2057005ded46375616f14941fb6fec68c" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~314~g0f81c9db" rel="1.20260716122029449110.main.314.g0f81c9db.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~314~g0f81c9db-1.20260716122029449110.main.314.g0f81c9db" date="1784203200">- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="97d959c690d44a94ad3dfb7659ed8eeff75cb711790b347fc6ce96f9dc335709" name="flightctl-selinux" arch="noarch">
  <version epoch="0" ver="1.3.0~main~315~g51bce98f" rel="1.20260716142205876797.main.315.g51bce98f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~315~g51bce98f-1.20260716142205876797.main.315.g51bce98f" date="1784203200">- EDM-2392: Adjust observability tests to run on quadlets and OCP (#3175) (Itzik Brown)
- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="0be2cfd528fa0eadc926495b5fbd3e507017ab523abb24a6fda724579ea946a2" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~272~ge4c489e1" rel="1.20260702083056866245.main.272.ge4c489e1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~272~ge4c489e1-1.20260702083056866245.main.272.ge4c489e1" date="1782993600">- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="94a9271ce19c79986cf4b40bef904028b750cd2bcc6a2568b7dba6e5d77898cd" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~275~g15e5c0d3" rel="1.20260705062113984065.main.275.g15e5c0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~275~g15e5c0d3-1.20260705062113984065.main.275.g15e5c0d3" date="1783252800">- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="23be186d4d6f8474e2e1026398bb08d239e5884627e3dee2ee3aa726e8d37add" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~276~g79d90e0b" rel="1.20260705084048010742.main.276.g79d90e0b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~276~g79d90e0b-1.20260705084048010742.main.276.g79d90e0b" date="1783252800">- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="736e01c046c2747204ce1dc58f76977a6f331f109ee4ba1099723a9b5f957b07" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~277~g92597755" rel="1.20260705090528951244.main.277.g92597755.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~277~g92597755-1.20260705090528951244.main.277.g92597755" date="1783252800">- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d49b7db4751ffb7f995373f88fc9615528419d1c0ff31b586e2c767bdf901324" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~278~ge4d56bea" rel="1.20260705102718544650.main.278.ge4d56bea.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~278~ge4d56bea-1.20260705102718544650.main.278.ge4d56bea" date="1783252800">- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="336eee2c8353b1587438234582af876f6c5e6e214c0656587be48cda218d2fba" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~279~g5e657f9a" rel="1.20260706103919292593.main.279.g5e657f9a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~279~g5e657f9a-1.20260706103919292593.main.279.g5e657f9a" date="1783339200">- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4411cbfa7400432318be6b2730953a60d6b605d1173e866d7309e1b079352efa" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~280~gfd17722f" rel="1.20260706151411942403.main.280.gfd17722f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~280~gfd17722f-1.20260706151411942403.main.280.gfd17722f" date="1783339200">- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="8857912993b935480208a25a7f767531f4e6bc6b607de4e532da54e3aadc0d9c" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~281~ga53cdfe3" rel="1.20260706223619198122.main.281.ga53cdfe3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~281~ga53cdfe3-1.20260706223619198122.main.281.ga53cdfe3" date="1783339200">- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="3273c33762c80ef414b27281c61f7a64afffdc507acc84df9ddd189175a8ed1e" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~282~gb8814533" rel="1.20260707080941577366.main.282.gb8814533.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~282~gb8814533-1.20260707080941577366.main.282.gb8814533" date="1783425600">- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="bbd96fcab59565d228ac01807c3bda4ba1c7f97cd6b23a6bbabffdef38d7d95d" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~283~gcac8f0d3" rel="1.20260707202441753497.main.283.gcac8f0d3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~283~gcac8f0d3-1.20260707202441753497.main.283.gcac8f0d3" date="1783425600">- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="ad5fd2b2ac485a851ae993a36a7fea083eb8b54887d71e5c1e933f054ad3c933" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~284~ge9e26e7c" rel="1.20260708063029767266.main.284.ge9e26e7c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~284~ge9e26e7c-1.20260708063029767266.main.284.ge9e26e7c" date="1783512000">- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="7b74e0702091529050f21f3b9f8ae7bcc71807eafc6e72b5f6363444aefdc8a8" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~285~g1c011be3" rel="1.20260708121656129457.main.285.g1c011be3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~285~g1c011be3-1.20260708121656129457.main.285.g1c011be3" date="1783512000">- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9dc78673a15c8b6c2bbeb1ee2aa9c1debfe9a51d7de730faa923c145d1b917c7" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~286~g0a7a009a" rel="1.20260709063944354350.main.286.g0a7a009a.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~286~g0a7a009a-1.20260709063944354350.main.286.g0a7a009a" date="1783598400">- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="788062b3ca50f1099aa2657e4d17af4bcf7b0ff6adaed7f14f2b90ef91586e30" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~287~g9eee6407" rel="1.20260709100547687031.main.287.g9eee6407.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~287~g9eee6407-1.20260709100547687031.main.287.g9eee6407" date="1783598400">- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1206b45641ee5c257a462faa0222c623b7894f4a0f90af8af5e2db6168c859ba" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~288~g7ce7e95e" rel="1.20260709111602902675.main.288.g7ce7e95e.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~288~g7ce7e95e-1.20260709111602902675.main.288.g7ce7e95e" date="1783598400">- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="d1e8d5c9e527a5707451919220cda466348164a6f174a45ff7f0d655f9d74199" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~289~g503bb2c5" rel="1.20260709120901565549.main.289.g503bb2c5.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~289~g503bb2c5-1.20260709120901565549.main.289.g503bb2c5" date="1783598400">- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4167fd0c2f0d714a7a5ea544d08dcd254e30bd49171bf375cb2534e68d265d15" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~291~g2eb9a30b" rel="1.20260709143909877108.main.291.g2eb9a30b.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~291~g2eb9a30b-1.20260709143909877108.main.291.g2eb9a30b" date="1783598400">- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="5445493c69172583d5dd48984dd49133f7b52b0cbb767b15b2bac5325b650246" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~292~ga5312331" rel="1.20260709181440362738.main.292.ga5312331.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~292~ga5312331-1.20260709181440362738.main.292.ga5312331" date="1783598400">- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="7ae3d979f6f68f9ee032eb16ec7c20c91108674f91fdc72e5989059580263d82" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~293~ga8d08d5d" rel="1.20260710170135522345.main.293.ga8d08d5d.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~293~ga8d08d5d-1.20260710170135522345.main.293.ga8d08d5d" date="1783684800">- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="7578c0db5993afbf4063f0edec4d7f0b9e932de2a2a4ddfa676e514f444f2aa0" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~294~g5aaf42fd" rel="1.20260712110344206097.main.294.g5aaf42fd.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~294~g5aaf42fd-1.20260712110344206097.main.294.g5aaf42fd" date="1783857600">- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="561a7b0b18a092ed1f5273ddebca5688d65897ebf7321ae117cbd17885a0825a" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~295~g2d00934c" rel="1.20260712112216367559.main.295.g2d00934c.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~295~g2d00934c-1.20260712112216367559.main.295.g2d00934c" date="1783857600">- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="1017f1114756e2dfa96b3acef7d4141b6a42af452edbfb251398f6b71f2f2a46" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~296~g31d8e417" rel="1.20260712114315982425.main.296.g31d8e417.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~296~g31d8e417-1.20260712114315982425.main.296.g31d8e417" date="1783857600">- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9482f10f5fc2cf6736271de979578d43f1ee573560b14e7cfdf070640d68b17a" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~297~g6a975d27" rel="1.20260713083000484191.main.297.g6a975d27.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~297~g6a975d27-1.20260713083000484191.main.297.g6a975d27" date="1783944000">- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c2a645192ad1410343e80566d79da426b15290ac48810c877e785fdb72a0ecf5" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~298~g26576b84" rel="1.20260713122749032568.main.298.g26576b84.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~298~g26576b84-1.20260713122749032568.main.298.g26576b84" date="1783944000">- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="5e9bfeac55864e58ae304a27a0919a578d48e64f90c4fc7ec30e1227dda07c2e" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~299~g74056159" rel="1.20260713170248892028.main.299.g74056159.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~299~g74056159-1.20260713170248892028.main.299.g74056159" date="1783944000">- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="c42dd65b52c71b160450b446056b810e9c2aa32261ab0b03a03b30049b91ceab" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~300~g8e7a3347" rel="1.20260713171655351650.main.300.g8e7a3347.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~300~g8e7a3347-1.20260713171655351650.main.300.g8e7a3347" date="1783944000">- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b0917c887b347b55d24f86a5da760ddef74c4bdbc3f310229fd92fa4d910ecd0" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~301~ga9e93ea2" rel="1.20260713172252707910.main.301.ga9e93ea2.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~301~ga9e93ea2-1.20260713172252707910.main.301.ga9e93ea2" date="1783944000">- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="713932af7eb5b9ae6a35b7beefdbab1789ed644d7694051517cfa7d844deaed0" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~302~g9ef15314" rel="1.20260713205735699059.main.302.g9ef15314.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~302~g9ef15314-1.20260713205735699059.main.302.g9ef15314" date="1783944000">- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="5296b291aec8e165836e6ee69effbd0a05d40fe87d12faa76bf3d4c6c654b2a9" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~303~g07e259bc" rel="1.20260713213837055964.main.303.g07e259bc.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~303~g07e259bc-1.20260713213837055964.main.303.g07e259bc" date="1783944000">- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9518d422dc3d411477a9c9adc2246488af364aa7ce32ec3097b28acd76437971" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~304~ga26c4b12" rel="1.20260714072402617858.main.304.ga26c4b12.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~304~ga26c4b12-1.20260714072402617858.main.304.ga26c4b12" date="1784030400">- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6eba0dce650174eb7492cf0e0ac27a0a0964754b1c31e344ca7bcb05d17efba1" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~305~g714cb9ec" rel="1.20260714103405955004.main.305.g714cb9ec.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~305~g714cb9ec-1.20260714103405955004.main.305.g714cb9ec" date="1784030400">- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="082c9cce0f7d2a535b533655e7a5aa941a2be2f0c1af2230dfeb956c4fe5a12c" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~306~gb06cc4d6" rel="1.20260714125059563022.main.306.gb06cc4d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~306~gb06cc4d6-1.20260714125059563022.main.306.gb06cc4d6" date="1784030400">- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="46d8a1da15eb7c3188e5e9a2fd1fc0c3897d0e9fb2aee085fd0db051c9bcf0d2" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~307~g6968d986" rel="1.20260715064543439701.main.307.g6968d986.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~307~g6968d986-1.20260715064543439701.main.307.g6968d986" date="1784116800">- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="0e8c5ce8bd755333b2eb37e3f8f6253fcfa8bc0c1b38ed4fd1f6b3b8d70e1904" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~308~gcba6f9b1" rel="1.20260715093150331298.main.308.gcba6f9b1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~308~gcba6f9b1-1.20260715093150331298.main.308.gcba6f9b1" date="1784116800">- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="328f12b55d3163bb2980b0f7dd98dd8f6c50a3c89e1be8672fb6aa9b1f0a73e1" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~309~ge2adb1d6" rel="1.20260715104653276333.main.309.ge2adb1d6.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~309~ge2adb1d6-1.20260715104653276333.main.309.ge2adb1d6" date="1784116800">- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="b4b85019e86021c0f8e6069d6e235a9de9ec7d7400e471e536d47cd321c5d0a5" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~310~g72559a5f" rel="1.20260715110954091718.main.310.g72559a5f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~310~g72559a5f-1.20260715110954091718.main.310.g72559a5f" date="1784116800">- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6cc1eb071b57d5f012d2b77c4d3aaaf4b9130d03d781628e7d684ec31eacde12" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~311~g45b8dcd1" rel="1.20260715111938741870.main.311.g45b8dcd1.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~311~g45b8dcd1-1.20260715111938741870.main.311.g45b8dcd1" date="1784116800">- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="9c0b51504e2ad679a5f1c68dae41bb544677c0b56a40888deb9e18f1a2c41775" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~312~g144d37ab" rel="1.20260715131803155366.main.312.g144d37ab.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~312~g144d37ab-1.20260715131803155366.main.312.g144d37ab" date="1784116800">- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="01f30777c3e30306529ddbceb7bb5e6b563f58e5b865e8172e629335bdd8f3ec" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~313~g33e5a2b3" rel="1.20260715134647812046.main.313.g33e5a2b3.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~313~g33e5a2b3-1.20260715134647812046.main.313.g33e5a2b3" date="1784116800">- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="6b6202ebaff8444a641f4d149e8385a70a5be5b33ee4e5659a2643263bad4643" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~314~g0f81c9db" rel="1.20260716122029449110.main.314.g0f81c9db.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~314~g0f81c9db-1.20260716122029449110.main.314.g0f81c9db" date="1784203200">- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="4cf0fd7964958730a6da92af6b986bf64076650908a6a6959fc5e688e35f833b" name="flightctl-services" arch="x86_64">
  <version epoch="0" ver="1.3.0~main~315~g51bce98f" rel="1.20260716142205876797.main.315.g51bce98f.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0~main~315~g51bce98f-1.20260716142205876797.main.315.g51bce98f" date="1784203200">- EDM-2392: Adjust observability tests to run on quadlets and OCP (#3175) (Itzik Brown)
- EDM-4667: isolated store subpackages (#3208) (Asaf Ben Natan)
- NO-ISSUE: add --force flag to take over an active app console session (#3229) (Asaf Ben Natan)
- EDM-4753: Add fieldSelector support for status.capabilities.osMode (#3236) (Gal)
- EDM-4743: Wire encryption-at-rest infrastructure (#3230) (Assaf Albo)
- NO-ISSUE: fix VM app console on Kubernetes (RBAC, UI wiring, annotation leaks, CLI errors) (#3224) (Asaf Ben Natan)
- EDM-4751: Add DeviceCapabilities and EnrollmentRequest osMode schema (#3233) (Gal)
- NO-ISSUE: Run backend image builds on flightctl-ci-runner (#3235) (Gal)
- EDM-4741: Fix edit no-args e2e expectation (#3232) (Eldar101)
- NO-ISSUE: overlap E2E aux service setup with VM boot, stream image bundle via skopeo (#3215) (Asaf Ben Natan)
- NO-ISSUE: Nest application lifecycle and app console commands under "flightctl app" (#3227) (Asaf Ben Natan)
- EDM-4722: Add observability (tracing and metrics) to encryption subsystem (#3217) (Assaf Albo)
- EDM-4727: fix console trigger to avoid bumping renderedVersion (#3193) (Asaf Ben Natan)
- NO-ISSUE: stop go/lint/dnf/bootc caches from thrashing the repo's 10GB cache budget (#3222) (Asaf Ben Natan)
- EDM-4520: Fix for e2e backup-restore ers cleanup (#3218) (Itzik Brown)
- EDM-4561: add registry auth support for imagebuilder-worker service images (#3205) (aekubacki)
- EDM-4376: Generate Helm ClusterRoles from static auth permissions (#3196) (kkyrazis)
- EDM-4560: add VNC support for VM application console (#3187) (Asaf Ben Natan)
- EDM-3791: Add AAP bearer token authentication support for Quadlet E2E tests (#3207) (amalykhi)
- NO-ISSUE: fix prune-ci-caches gh cache commands with no git checkout (#3219) (Asaf Ben Natan)
- NO-ISSUE: cache apt package downloads in setup-dependencies action (#3214) (Asaf Ben Natan)
- NO-ISSUE: exclude no-op runs from e2e health report timing averages (#3213) (Asaf Ben Natan)
- EDM-4099: [DEV] Agent lifecycle reconciliation — CLI support (#3202) (Asaf Ben Natan)
- NO-ISSUE: fix import.sh including failed images from BundleImages (#3200) (aekubacki)
- NO-ISSUE: Fix authprovider browser login env (#3183) (Eldar101)
- EDM-4098: [DEV] Agent lifecycle reconciliation — Quadlet, Container, Compose, VM, and Helm (#3117) (Asaf Ben Natan)
- NO-ISSUE: add buildah cache for smoke test container builds (#3212) (Asaf Ben Natan)
- EDM-2822: Improve expired OAuth2 token error message (#3194) (Efilaluck)
- EDM-4102: [DEV] desiredState, restartGeneration, and Stopped/Stopping API schema (#3198) (Asaf Ben Natan)
- EDM-4559: Wait for authentication to be available after certificate rotation tests (#3204) (Itzik Brown)
- EDM-4690: Add encryption subsystem infrastructure (#3195) (Assaf Albo)
- NO-ISSUE: Remove wildcard from flightctl-imagebuilder-worker scc (#3199) (Itzik Brown)
- NO-ISSUE: Update observability image tags (#3201) (kkyrazis)
- NO-ISSUE: Fix fleet rollout skipping re-render when renderedTemplateVersion is stale, Fixes #3141 (#3142) (Miroslav Kolar)
- NO-ISSUE: fixes a case where e2e are faked pass by failed build steps (#3191) (Asaf Ben Natan)
- EDM-3400:Create an automation for using RHEM behind a HA Proxy (#3178) (Eldar101)
- EDM-4107: CLI app serial console (#3135) (Asaf Ben Natan)
- EDM-4009: Fix confusing error message in edit command (#3179) (Efilaluck)
- EDM-4106: implement VM serial console via podman exec (#3109) (Asaf Ben Natan)
- EDM-4258: Vulnerability-sync periodic task produces error logs when VulnerabilityReporting is not configured (#3150) (bugs-buddy-jira-ai-issue-solver[bot])
- NO-ISSUE: use pre-built vm-to-quadlet image in vmRender integration suite (#3188) (Asaf Ben Natan)
- NO-ISSUE: replace ineffective Go host cache with buildah cache for container builds (#3186) (Asaf Ben Natan)
- EDM-4601: Add Basic auth support for OCI repositories (#3189) (Asaf Ben Natan)
- EDM-4095: switch VM render to vm-to-quadlet, expose publishPorts, revert .kube support (#3182) (Asaf Ben Natan)
- NO-ISSUE: add unit and integration test health reports (#3184) (Asaf Ben Natan)
- NO-ISSUE: fix: flightctl-mirror-images fails when installed via RPM (#3166) (aekubacki)
- NO-ISSUE: disable MicroShift helm tests on cs10-bootc (#3185) (Asaf Ben Natan)
- EDM-4380: support quadlet deployments in dependency sync e2e tests (#3140) (hferber1)
- EDM-4505: Adding db SSL volumes and volumes mounts when using externaldb and SSL (#3177) (Itzik Brown)
- EDM-4429: flightctl-backup fails on quadlet/podman deployments with external database (#3171) (Samuel De La Cruz Lopez)
- NO-ISSUE: Fix standalone OAuth2 authprovider test (Eldar Weiss)
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4336: SignerServerSvc issues server certificates with attacker-chosen SANs → fleet-wide MITM (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-2349: Expand multiorg RBAC e2e coverage (Itzik Brown)
- EDM-4168: bump golang.org/x/crypto to v0.53.0 for SSH security fixes (Amir Yogev)
- EDM-4168: patch CVE-2026-39821 by updating golang.org/x/net to v0.55.0 (Amir Yogev)
- NO-ISSUE: patch CVE-2026-33815 by updating pgx to v5.9.2 (Amir Yogev)
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4246: Agent ignores http proxy configuration (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4249: RPM upgrade leaves stale flightctl-cli-artifacts-init.service unit reference (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4104: regenerate API types after x-enum-varnames addition (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- EDM-4104: add env.template to RPM spec for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: fix gci import formatting in server.go (Asaf Ben Natan)
- EDM-4104: fix remote-access Helm config: add DB/KV, drop client-signer (Asaf Ben Natan)
- EDM-4104: add redeploy-remote-access make target (Asaf Ben Natan)
- EDM-4105: wire remote-access image into kind/Helm deployment script (Asaf Ben Natan)
- EDM-4105: wire DB/KV secrets and startup ordering into remote-access quadlet (Asaf Ben Natan)
- EDM-4105: remove CA signing key dependency from remote-access service (Asaf Ben Natan)
- EDM-4105: address review feedback (Asaf Ben Natan)
- NO-ISSUE: fix oasdiff agent API check to allow external refs (Asaf Ben Natan)
- EDM-4105: add application console WebSocket endpoint to remote-access service (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: document remoteAccess.resources in Helm chart README (Asaf Ben Natan)
- EDM-4104: route remote-access service API through main gateway (8443), not a dedicated port (Asaf Ben Natan)
- EDM-4104: terminate TLS for service API (3444) at nginx, not at service (Asaf Ben Natan)
- EDM-4104: expose both remote-access ports via the podman gateway (Asaf Ben Natan)
- EDM-4104: revert podman changes that conflict with stacked PRs (Asaf Ben Natan)
- EDM-4104: address review feedback (Asaf Ben Natan)
- Replace wget with curl in observability documentation (Itzik Brown)
- NO-ISSUE: move pipe cleanup to defer so it runs on assertion timeout (Amir Yogev)
- NO-ISSUE: fix TestListenForEvents race with pipe lifecycle and mock expectations (Amir Yogev)
- NO-ISSUE: fix TPM NV read chunk size to respect TPM_PT_NV_BUFFER_MAX, Fixes #3126 (Miroslav Kolar)
- EDM-4104: load remote-access image into kind and add to deploy-helm prerequisites (Asaf Ben Natan)
- EDM-4104: fix gofmt struct field alignment (Asaf Ben Natan)
- EDM-4104: use server TLS config (not mTLS) for service-api HTTP listener (Asaf Ben Natan)
- EDM-4104: add remote-access.{baseDomain} SAN to cert helper (Asaf Ben Natan)
- EDM-4104: align remote-access service-api TLS with other services (Asaf Ben Natan)
- EDM-4104: switch helm upgrade from --reuse-values to --reset-then-reuse-values (Asaf Ben Natan)
- EDM-4104: wire cert provisioning for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Quadlet, image config, renderer, and RPM entries for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Helm chart templates for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add Containerfile and Makefile container target for flightctl-remote-access (Asaf Ben Natan)
- EDM-4104: add flightctl-remote-access service scaffold (binary + server stubs) (Asaf Ben Natan)
- NO-ISSUE: fix YAML-breaking heredoc and stale RSA host key (Asaf Ben Natan)
- NO-ISSUE: address review feedback on e2e health report publish step (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- NO-ISSUE: publish e2e health report to flightctl-reports gh-pages (Asaf Ben Natan)
- EDM-4382: Validate credentials file permissions before reading (Kyle Kyrazis)
- EDM-4382: Update login docs for credentials-file and env vars (Kyle Kyrazis)
- EDM-4382: Add secure credential passing to flightctl login (Kyle Kyrazis)
- NO-ISSUE: fix lint-fix container to run as host user (Asaf Ben Natan)
- NO-ISSUE: Reduce make lint wall-clock time by ~63% and add lint-fix target (Asaf Ben Natan)
- NO-ISSUE: Fix test descriptions in pubsub_test.go to follow naming convention (Asaf Ben Natan)
- NO-ISSUE: Document RACE and COVERAGE opt-out flags in AGENTS.md (Asaf Ben Natan)
- NO-ISSUE: Add RACE and COVERAGE opt-out flags to unit-test, remove -count=1 (Asaf Ben Natan)
- NO-ISSUE: Remove 1.5s retry backoff sleep from alertmanager EventualSuccess test (Asaf Ben Natan)
- NO-ISSUE: Remove redundant sleeps after terminal UpdateCondition calls in imagebuilder tests (Asaf Ben Natan)
- NO-ISSUE: Replace invalid DNS hostnames with loopback:1 in tests to avoid timeouts (Asaf Ben Natan)
- NO-ISSUE: Cache OpenAPI router in ApplyJSONPatch to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Make health checker poll interval injectable to fix slow unit tests (Asaf Ben Natan)
- NO-ISSUE: Fix unit test classification and add proper pkg/queues tests (Asaf Ben Natan)
- EDM-3679: bump Go 1.25.8 to 1.25.9 in CI workflows, Containerfiles, and test module (Amir Yogev)
- EDM-3679: bump toolchain in codegen modfiles to go1.25.9 (Amir Yogev)
- EDM-3679: patch CVE-2026-32280 by updating Go toolchain to go1.25.9 (Amir Yogev)
- EDM-3778: VM Agent Helm Application Tests SSH fix (Samuel de la Cruz)
- EDM-2054: inject mirror registry config into QCOW for MicroShift (David Asulin)
- EDM-3853: CI fix to redit (Eldar Weiss)
- EDM-4334: Fix backup/restore for external database deployments (amalykhi)
- EDM-4100: Refactor VM identity into VMSpec and parse namespace from pod YAML (Asaf Ben Natan)
- EDM-4100: Derive VM container and domain names from pod YAML (Asaf Ben Natan)
- EDM-4100: Address review feedback round 2 (Asaf Ben Natan)
- EDM-4100: Address review feedback — route VM status exec through podman client (Asaf Ben Natan)
- EDM-4100: using annotation to detect vm workload (Asaf Ben Natan)
- EDM-3454: precompute warning message, skip info override on non-Online status (Gal Elharar)
- EDM-3454: persist config warnings via status exporter, consolidate tests (Gal Elharar)
- EDM-3454: surface skipped drop-in warnings in device status (Gal Elharar)
- EDM-3454: Skip invalid config drop-ins instead of crashing (Gal Elharar)
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: address PR feedback (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-4337: SQL injection in CountByLabels via disruptionBudget.groupBy with ResourceSync validation bypass (bugs-buddy-jira-ai-issue-solver[bot])
- EDM-3949: Added backup and restore test suite (Samuel de la Cruz)
- EDM-1057: Consolidate allMissing and anyMissing into single loop (Gal Elharar)
- EDM-1057: Address PR review feedback (Gal Elharar)
- EDM-1057: Fatal exit on missing spec files (Gal Elharar)
- EDM-1057: Recover from missing spec files during reconciliation (Gal Elharar)
- EDM-3858: Fix quadlet E2E for remote VM environments (David Asulin)
- EDM-4097: Address review feedback — extract lookupKubeYamlPath helper and use errors.Is (Asaf Ben Natan)
- EDM-4097: Address review feedback — explicit sentinel check in namespacePodYAML (Asaf Ben Natan)
- EDM-4097: updated kubevirttopod container (Asaf Ben Natan)
- EDM-4097: Add pod YAML helpers for VM detection and OCI prefetch (Asaf Ben Natan)
- NO-ISSUE: fix fips for kubevirt-vm-to-pod (Asaf Ben Natan)
- EDM-4184: multi-org cleanup to fix regression in parameterizable templates (Eldar Weiss)
- NO-ISSUE: add system requirements sizing table to installation docs (Alex Kubacki)
- EDM-4096: use quadlet.Unit parser in buildKubeUnit instead of string replace (Asaf Ben Natan)
- EDM-4096: align vmrender test lifecycle with canonical tasks integration test pattern (Asaf Ben Natan)
- EDM-4096: inject Yaml=pod.yaml into user-provided .kube when Yaml= directive is absent (Asaf Ben Natan)
- EDM-4096: Address review feedback — harden test Containerfile, guard nil converter, fix test lifecycle and .kube content assertion (Asaf Ben Natan)
- EDM-4096: use section-aware quadlet parser and validate apiVersion in pod manifests - Replace raw line scanning in parseKubeYamlDirective with quadlet.NewUnit   + Lookup so that Yaml= is only extracted from the [Kube] section, not from   unrelated sections such as [Unit] or [Install]. - Add apiVersion presence check to validatePodManifest; a manifest with   kind: Pod but empty apiVersion is not a valid Kubernetes object and will   fail downstream. (Asaf Ben Natan)
- EDM-4096: address PR review feedback (Asaf Ben Natan)
- EDM-4096: render VmApplication into QuadletApplication via kubevirt-vm-to-pod (Asaf Ben Natan)
- NO-ISSUE: restore air-gapped-operations.md to fix link-check CI (Alex Kubacki)
- NO-ISSUE: remove air-gapped-operations.md — will be provided by PR #3114 (Alex Kubacki)
- EDM-4036: clarify prep machine OS requirements for --bundle-rpms (Alex Kubacki)
- EDM-4036: address review feedback — simplify decision tree and broaden platform scope (Alex Kubacki)
- EDM-4036: add consolidated air-gapped installation guide (Alex Kubacki)
- EDM-4023/4028: clarify that local registry workflow applies to both OS and workload images (Alex Kubacki)
- EDM-4033/4023/4028: address review feedback from kkyrazis (Alex Kubacki)
- NO-ISSUE: add air-gapped-operations.md to docs index (Alex Kubacki)
- EDM-4032: add OCP artifact packaging section to offline-portable-media.md (Alex Kubacki)
- EDM-4035: add Podman Quadlet configuration for disconnected image builder (Alex Kubacki)
- EDM-4034: expand ITMS documentation with policy options, verification and troubleshooting (Alex Kubacki)
- EDM-4033/4023/4028: add air-gapped enrollment and operations documentation (Alex Kubacki)
- EDM-4177: Fix flightctl-restore service recovery on database connection failure (amalykhi)
- EDM-4185: Fix RHEM profile name mismatch (rawagner)
- EDM-4159: Document custom CA integration with cert-manager (asafbss)
- EDM-3844: Adding e2e tests for Automated Synchronization for Git &amp; Secrets &amp; HTTP (Hadar Ferber)
- NO-ISSUE: Do not add safe directory duplicates (Celia Amador)
- EDM-4162: Reject consecutive dots in config name validation (Gal Elharar)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- NO-ISSUE: Fix ulimit documentation for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Update CodeRabbit config: refine action pinning, enforce AI attribution (Andy Dalton)
- EDM-3405: Address PR review comments (David Asulin)
- EDM-3405: Auto-detect disconnected env and fall back to OCP mirror (David Asulin)
- EDM-3953: document --nobest behaviour in install-rpms.sh (Alex Kubacki)
- EDM-3953: add --nobest to dnf install in install-rpms.sh to handle minor version mismatches (Alex Kubacki)
- EDM-4095: Mention optional .kube file in VmApplication schema description (Asaf Ben Natan)
- EDM-4095: Add VmApplication API types, OpenAPI spec, and validation (Asaf Ben Natan)
- EDM-3953: add flightctl-mirror-images flag reference table to offline install doc (Alex Kubacki)
- EDM-3953: update agent offline install doc to use flightctl-mirror-images (Alex Kubacki)
- EDM-3953: drop --rpm-version flag — auto-pin from --tag-override covers all cases (Alex Kubacki)
- EDM-3953: extract RPM version pinning into resolveRPMVersion to reduce cyclomatic complexity (Alex Kubacki)
- EDM-3953: document --rpm-version flag and auto-pin behaviour in README and offline install doc (Alex Kubacki)
- EDM-3953: pin RPM version to match --tag-override to prevent bundle mismatch (Alex Kubacki)
- NO-ISSUE: Show PR number in backport description (Ben Keith)
- NO-ISSUE: Exclude closed+unmerged PRs from verify-backports script (Ben Keith)
- NO-ISSUE: clarify which PR is not merged in backport script (Ben Keith)
- NO-ISSUE: Add option for worktree removal in backport script (Ben Keith)
- NO-ISSUE: Remove empty file (rawagner)
- NO-ISSUE: Add docs for ImagePromotion and Repository base images (rawagner)
- EDM-3621: fix comma-injection test to use v1alpha1-capable fake client (Asaf Ben Natan)
- EDM-3621: address CodeRabbit review feedback (Asaf Ben Natan)
- EDM-3621: add CLI autocompletion for catalog, catalogitem, and imagebuilder resource names (Asaf Ben Natan)
- EDM-3807: Improve logic to compute img suffix during upgrades (rawagner)
- NO-ISSUE: Add usernames to verify-backport output (Ben Keith)
- EDM-3938: Delete preupgrade-scale job also before-hook-creation (rawagner)
- NO-ISSUE: Adjust API port in quadlets (Itzik Brown)
- NO-ISSUE: Script to verify backports (Ben Keith)
- NO-ISSUE: Backport script/docs (Ben Keith)
- EDM-3697: fix syncDatabasePasswords to read from Podman secret directly (Asaf Ben Natan)
- EDM-3697: added flightctl-gateway for stop/started services when restoring (Asaf Ben Natan)
- EDM-3697: fix credentails extraction for quadlets (Asaf Ben Natan)
- EDM-3697: remove unrelated files from branch (amalykhi)
- EDM-3697: read master password from secret for password sync (amalykhi)
- EDM-3697: sync database passwords after restore (amalykhi)
- NO-ISSUE: better readme (Asaf Ben Natan)
- EDM-3936: added ulimit flag and troubleshooting info (Asaf Ben Natan)
- EDM-3697: fix binary copy and restore in E2E tests (amalykhi)
- EDM-4119: Fix agent log priority mapping for journald (asafbss)
- EDM-4120: Use keepalive for gateway API connections (Ben Keith)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in Helm values and README (Alex Kubacki)
- EDM-3953: fix mirror-images reference in values.yaml.gotmpl (Alex Kubacki)
- EDM-3953: fix doubled flightctl-flightctl-mirror-images in docs and README (Alex Kubacki)
- EDM-3953: update prose references from mirror-images to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: rename mirror-images binary to flightctl-mirror-images (Alex Kubacki)
- EDM-3953: add mirror-images binary to flightctl-cli RPM package (Alex Kubacki)
- EDM-3953: remove kv-standalone image entries from el9/el10 images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el10/images.yaml (Alex Kubacki)
- EDM-3953: add kv-standalone entry for docker.io/library/redis in el9/images.yaml (Alex Kubacki)
- EDM-3953: fix kv image in el9/images.yaml to match quadlet and bundle (Alex Kubacki)
- EDM-4125: fixed device taking stale data on dependency change (Asaf Ben Natan)
- NO-ISSUE: Fix authprovider e2e setup (Eldar Weiss)
- EDM-4120: Unix socket for standalone agent API (Ben Keith)
- EDM-3607: Ensure ClusterRole/Binding is created before running the cleanup job (rawagner)
- EDM-3955: replace flightctl CLI verification with curl in OCP offline doc (Alex Kubacki)
- EDM-3955: add createrepo_c to prep machine prerequisites (Alex Kubacki)
- EDM-3955: revert flightctl CLI verification to curl in offline install doc (Alex Kubacki)
- EDM-3955: address tester feedback on disconnected install docs (Alex Kubacki)
- EDM-3953: rename redhat-* variants to rhem-* to match product naming (Alex Kubacki)
- EDM-3955: rewrite OCP disconnected install doc to use mirror-images tool (Alex Kubacki)
- EDM-2854: Cleanup job should remove other jobs too (rawagner)
- EDM-4083: Run backup inside VM for quadlet e2e tests (amalykhi)
- EDM-4076: Allow defining displayName for IP new catalog items (Celia Amador)
- NO-ISSUE: skip Slack notification when webhook URL is not set (Asaf Ben Natan)
- NO-ISSUE: fix e2e health report missing system dependencies (Asaf Ben Natan)
- EDM-4053: Suppress nginx version header (Ben Keith)
- EDM-3953: fix --tag-override ignored for images with explicit tag: latest (Alex Kubacki)
- EDM-3783: Quadlet Gateway After Dependencies (Ben Keith)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: consolidated make agent-vm (Asaf Ben Natan)
- NO-ISSUE: addressed more comments (Asaf Ben Natan)
- NO-ISSUE: addressed comments (Asaf Ben Natan)
- NO-ISSUE: e2e health report (Asaf Ben Natan)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- EDM-3906: Added quadlets multiorg test suite compatibility (Samuel de la Cruz)
- NO-ISSUE: Add gateway image back (Itzik Brown)
- EDM-3953: add mirror-images tool for air-gapped FlightCtl installation (Alex Kubacki)
- EDM-4038: Own license dirs in CLI RPM for clean uninstall (Kyle Kyrazis)
- NO-ISSUE: fix run-e2e label (Asaf Ben Natan)
- NO-ISSUE: fix e2e filter (Asaf Ben Natan)
- EDM-3783: Expose old ports by default on quadlets deploy (Ben Keith)
- NO-ISSUE: make rpm postun cleanup non-fatal (Asaf Ben Natan)
- EDM-4021: clean up temporary container storage dirs on job completion and RPM uninstall (Asaf Ben Natan)
- EDM-4057: Remove ReloadCmd directive from flightctl-gateway.container (Itzik Brown)
- EDM-2708: Approve agent VM enrollment in workflow (Eldar Weiss)
- EDM-2539: Auth provider tests (Eldar Weiss)
- EDM-2708: Add agent VM PR check (Eldar Weiss)
- EDM-4052: Add kubectl dependency check for Kubernetes restore (amalykhi)
- EDM-4057: Gateway handling of Quadlet container restarts (Ben Keith)
- EDM-89237: Add label 89237 to bootc timer e2e test (Tal Hilzenrat)
- EDM-3907: Add quadlet support to FIPS test suite (Samuel de la Cruz)
- EDM-3904: User documentation for backup and restore procedures (amalykhi)
- EDM-4038: Add alertmanager dir ownership to services RPM (Kyle Kyrazis)
- EDM-1990: Use quay.io nginx image for file server to avoid docker.io pull limits in CI (David Asulin)
- EDM-1990: Address PR review feedback - use lo.ToPtr and stop file server (David Asulin)
- EDM-1990: Propagate container inspect error in file server Start (David Asulin)
- EDM-1990: Address PR review feedback on file server auxiliary (David Asulin)
- EDM-1990: Add HTTP file server auxiliary and restore HTTP config provider in test 78684 (David Asulin)
- NO-ISSUE: Address PR review feedback (David Asulin)
- EDM-1990: Fix test 78684 for disconnected environments (David Asulin)
- NO-ISSUE: remove committed test-timings.json and add to .gitignore (Asaf Ben Natan)
- NO-ISSUE: fix lint error in main (Asaf Ben Natan)
- EDM-3812: Add e2e test of default device alias during registration (Hadar Ferber)
- NO-ISSUE: addressed CR comments , included STDDev (Asaf Ben Natan)
- NO-ISSUEL dynamic weight calc - added suite weight (Asaf Ben Natan)
- NO-ISSUE: added dynamic weight calculation for e2e (Asaf Ben Natan)
- EDM-4005: deny console access to viewer role (Asaf Ben Natan)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- EDM-3988: Fix cert rotation test flakyness (Samuel de la Cruz)
- NO-ISSUE: Accept Made-with trailer for AI attribution (Andy Dalton)
- NO-ISSUE: Address PR review feedback on CodeRabbit config (Andy Dalton)
- NO-ISSUE: Fix CodeRabbit approval settings (Andy Dalton)
- NO-ISSUE: Disable CodeRabbit automatic PR approval (Andy Dalton)
- NO-ISSUE: Add YAML language server schema directive to .coderabbit.yaml (Andy Dalton)
- NO-ISSUE: Overhaul CodeRabbit config for comprehensive PR reviews (Andy Dalton)
- EDM-4016: Fix gateway quadlet image rendering (Kyle Kyrazis)
- EDM-3989: Detect bootc timer in %post with find for image builds (Tal Hilzenrat)
- EDM-3399: Improve bootc-timer e2e detection and skip messaging (Tal Hilzenrat)
- EDM-3309: re-added Error: prefix to conform with e2e (Asaf Ben Natan)
- EDM-3309: more CR comments (Asaf Ben Natan)
- EDM-3309: some CR comment fixes (Asaf Ben Natan)
- EDM-3309: standardize CLI error printing and made more human readable (Asaf Ben Natan)</changelog>
</package>
<package pkgid="972d656c1d4a657c7765923af2cb26ca7c144d3ea66da193047c26c1a19afa5d" name="flightctl-telemetry-gateway" arch="x86_64">
  <version epoch="0" ver="1.2.0~main~27~gb5c1b040" rel="1.20260204153358102810.main.27.gb5c1b040.fc43"/>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-3" date="1744372800">- Add versioning to container images within flightctl-services sub-package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 0.6.0-4" date="1744718400">- Add ability to create an AAP Oauth Application within flightctl-services sub-package</changelog>
  <changelog author="Ori Amizur &lt;oamizur@redhat.com&gt; - 0.9.0-1" date="1751803200">- Add support for Flight Control standalone observability stack</changelog>
  <changelog author="Sam Batschelet &lt;sbatsche@redhat.com&gt; - 0.9.0-2" date="1752580800">- Improve selinux policy deps and install</changelog>
  <changelog author="Ilya Skornyakov &lt;iskornya@redhat.com&gt; - 0.10.0" date="1759924800">- Add pre-upgrade database migration dry-run capability</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1761566400">- Add must-gather script for the services sub package</changelog>
  <changelog author="Ben Keith &lt;bkeith@redhat.com&gt; - 1.0-1" date="1762948800">- Make observability and telemetry-gateway packages require services package</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1763380800">- Refactoring quadlet install, add standalone utils</changelog>
  <changelog author="Dakota Crowder &lt;dcrowder@redhat.com&gt; - 1.0-1" date="1764158400">- Adding certificate generation service</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0~main~27~gb5c1b040-1.20260204153358102810.main.27.gb5c1b040" date="1770206400">- NO-ISSUE: missing network policy for imagebuilder (Asaf Ben Natan)
- NO-ISSUE: Bump resourcesync e2e task timeout value (Dakota Crowder)
- NO-ISSUE: Add e2e harness setup without VMs and use for ResourceSync tests (Dakota Crowder)
- EDM-3265: build cs9 microshift image only if the repo is accessible (Ilya Skornyakov)
- EDM-3262: fixed cancel not working properly for pending states (Asaf Ben Natan)
- EDM-3263: when defaulting to HOST_FQDN -&gt; lowercase it (Asaf Ben Natan)
- EDM-3005: update ginkgo_total_nodes (Gregory Shilin)
- EDM-3005: update ginkgo_total_nodes to be 2 (Gregory Shilin)
- EDM-3005: Reorganize tests matrix. Label some tests as "agent" and run them for both CS9 and CS10 (Gregory Shilin)
- EDM-3005: Reorganize tests matrix. Label some tests as "agent" and run them for both CS9 and CS10 (Gregory Shilin)
- EDM-3005: Add cs10-specific error message support (Gregory Shilin)
- EDM-3005: Add running cs10-bootc e2e tests. Fix certificate handling (Gregory Shilin)
- NO-ISSUE: Disable rollback test temporarily (Ilya Skornyakov)
- NO-ISSUE: imagebuild api set to v1alpha1 (Asaf Ben Natan)
- EDM-3258: EDM-3257,operator cant cancel fix (Asaf Ben Natan)
- NO-ISSUE: fix Publish Binaries workflow (Ilya Skornyakov)
- EDM-2985: fix imports post-merge (Ilya Skornyakov)
- EDM-2985: add unit tests (Ilya Skornyakov)
- EDM-2985: validate header value (Ilya Skornyakov)
- EDM-2985: Add API version to HTTP request logs (Ilya Skornyakov)
- NO-ISSUE: repo url + entitlements support (Asaf Ben Natan)
- NO-ISSUE: Updated init container quadlet files to ensure everything in standardoutput and standarderror shows up in journal (Ram)
- NO-ISSUE: Add TC ID 87279 to greenboot rollback test (amalykhi)
- EDM-2636: Rootless Quadlets (Ben Keith)
- EDM-3226: fixes invalid chars attempted to be saved to psql (Asaf Ben Natan)
- EDM-6163: Skip kind test (Eldar Weiss)
- NO-ISSUE: MVC separation (Asaf Ben Natan)</changelog>
</package>
</otherdata>